Privacy

Reading the site

We collect nothing. There is no analytics script, no tracking pixel and no cookie — a request for any page sets none.

Your colour theme preference is kept in your browser's local storage. It never leaves your device and is not sent to us.

Cloudflare serves the site and keeps its own operational logs, as any host does.

Images inside reproduced READMEs

Project logos are copied onto this site precisely so that browsing a listing does not report your visit to each project's host. The images inside a reproduced README cannot be handled the same way, because some of them are generated on demand.

What is done instead: status badges are removed entirely — they tell you nothing useful about a project and were the bulk of these requests. The images that remain are diagrams and screenshots. They load only if you scroll to them, and no referrer is sent, so the other host learns an address and nothing about which page you were reading.

Advertising

Project pages carry one advertisement, served by EthicalAds and labelled as such above the content rather than below it.

They were chosen over a conventional ad network for a specific reason: EthicalAds sets no cookies, builds no profile of you and does not follow you to other sites. An ad is picked from the topic of the page you are on and a coarse idea of your region, and nothing about that view is retained against you.

What it does mean is that your browser requests the ad from their servers, which sees an address the way any host does. That is the whole of the exposure, and it is why there is one slot rather than several.

Submitting a project

The submission form stores what you type — the repository, an optional category, an optional note and an optional name or handle — together with the time, your language, a salted hash of your IP address, the two-letter country code Cloudflare provides, and your browser's user-agent string.

The IP address itself is never stored. The hash exists to rate limit submissions and to deal with abuse; it cannot be turned back into an address.

The form deliberately does not ask for an email address. There would be no honest use for it: outcomes are visible on the site, and holding contact details we would rarely use is a liability rather than a service.

Cloudflare Turnstile runs on that page to keep automated submissions out. It is operated by Cloudflare under their terms.

How long it is kept

Submissions are kept while they are in the review queue and for a reasonable period afterwards as a record of what was decided. Rate-limit counters expire on their own.

Ask and your submission will be deleted. There is no form for this and no account to prove — write to the address on the contact page and say which repository it concerned.

Who else sees it

Nobody. Submissions are not sold, shared or used for anything other than deciding whether to list a project.

Cloudflare processes the data as our infrastructure provider — hosting, the database, the anti-spam check and the forwarding address on the contact page. EthicalAds serves the advertisement described above and receives nothing from the submission form.