Privacy & data

Your provider account identifier and display name, session tokens as hashes, published content, comments and votes. We request profile access, not access to private repositories or Google files. OAuth access tokens are used for sign-in and are not stored.

Downloads are request counts, not installs. A short anonymous cookie deduplicates requests for one day. DNT and Global Privacy Control exclude requests from rankings. Daily pseudonymous request records remain while their shared item exists. Abuse limits use daily salted IP hashes; raw IP addresses are not stored in the app database. Expired rate-limit records are removed daily.

Feedback is private to the team and anyone holding its receipt key. We store the key hash, message, optional email and explicitly selected context. Keep the receipt link private. No automatic email is sent. Closed feedback is deleted after 180 days.

Sessions expire after seven days. You can sign out or delete your account in Account. Deletion removes your profile, posts and votes; comments on other posts become anonymous placeholders. You can also delete your own comments individually.

GitHub and linked tools have their own policies. Source checks inspect bounded text without executing it. They do not certify safety. Reuse follows the stated license and the original repository license.

This is a private development preview with local SQLite data. Public OAuth, hosting, operating policies and translation review must be completed before public beta. Preview accounts are shared testing identities; do not enter personal or sensitive data.