Privacy

Browsing the site #

Browsing needs no account. Pages, search and file lists are the same files for everyone; Cloudflare, which serves them, handles each request under its own privacy policy. We set no tracking cookies and build no profile of visitors.

We count page views and a few actions (searches, install clicks) with PostHog, set to use no cookies, keep no visitor profiles and discard IP addresses.

If you sign in #

Signing in with GitHub or Google gives us your display name, your avatar from that service, the date you signed up, and what the sign-in service keeps to keep you signed in (such as your account id and, if it shares it, your email address). It also keeps the sign-in tokens GitHub or Google gave it for your account and, for each browser you sign in on, the IP address and browser it signed in from, until that session ends (you sign out, or it expires). Settings lists your sessions. A sign-in cookie keeps you signed in on this site; it's only for that.

What you do while signed in #

An install through the launcher while signed in is recorded against your account (add-on, version, app, date), as that's what lets you review it. Your reviews, reports and claims are kept with your account. Reviews are public, shown with your display name and avatar. Installs while signed out aren't recorded against anyone.

Install counts #

After each install the launcher tells the site which version was installed, with no account or id, so the add-on's install count goes up. To count without knowing who installed, we keep only a code made from your IP address with a secret that rotates every day. Those rows are deleted after 2 days; the counts stay.

The launcher #

Installs go into the launcher's own folder. For a Cursor profile, Run copies them into the project you pick (and lists them in that project's git exclude file); Remove from project takes them back out. The launcher checks the status list every hour without sending ids, cookies or install data. “Send reports” (a note with no account when a file fails its hash check: the commit, the file path and both hashes) and usage reports are off until you turn them on in its Settings. The site sees the IP address a report comes from and keeps only a daily-changing code of it, to limit how many arrive.

Services we use #

The site runs on Cloudflare; accounts and data are kept in a Neon database with Neon Auth; add-on files are fetched from GitHub; page counts go to PostHog. We don't sell your data or share it for advertising.

Your choices #

You can edit or delete your reviews and sign out at any time. In Settings you can download a copy of your data or delete your account (your reviews stay, shown as "Deleted user"; install counts stay as numbers). For anything else, write to chase.work713.ying@gmail.com; we answer within 30 days.