Privacy

The short version

There are no accounts, no cookies, no advertising, and no third-party analytics or trackers on this site. We do not ask you for any personal information and we do not build a profile of you. The data behind the pages is public information about public repositories, not information about visitors.

We do not count visits either. The only thing that tells callers apart is a short-lived, in-memory rate limit on the public data endpoints, described below; it keeps no history and nothing is written to disk.

What is not collected

• No account, e-mail address, or password: there is nothing to sign in to.
• No cookies are set by this site. The only things kept in your browser are the theme you pick (light, dark, or follow your system) and whether the Collections group in the menu is expanded. Both are stored in local storage so the site opens the way you left it. They stay on your device, are never sent to us, and identify no one.
• No third-party analytics services, heatmaps, session recorders, or advertising pixels, and no first-party visit counter.
• Searches and filters are answered by the server and are not stored against you; the site keeps no record of who searched for what. The search terms you type are used to answer the request and are not written anywhere by the site (the hosting platform's request log, below, can contain the URL).

What we count about visits

Nothing. This site keeps no counter of its own: it does not count how often a page is opened, and it stores no cookie, session, IP address, user agent, referrer, or search term about the person opening it. Every page is built from a data set that our pipeline publishes, and the site has no database that a visit could write to. The only records of a request are the technical log the hosting platform keeps and the short-lived rate-limit counter, both described below.

What the infrastructure processes

The site is hosted on Vercel. Like any web server, the hosting platform processes the technical parts of a request (IP address, user agent, requested URL, timestamp) in order to deliver pages, keep the service up, and defend it against abuse. Those logs are handled by Vercel under its own privacy terms; we look at them only if something is broken or being abused. We do not use them to track individuals and we do not combine them with anything else.

We do not sell, rent, or share data about visitors, because we do not collect any.

What is stored about repositories

Our data pipeline, a separate program that runs on a schedule and is not part of the website you are visiting, fetches public information from the public GitHub API and from public discussion sites, keeps it in its own database, and publishes a set of files that the website reads: repository names and owners, descriptions, languages, licenses, star and fork counts over time, issue and pull request activity, links to public Hacker News and Reddit threads that mention a repository, and the numbers we derive from them (growth, rankings, merge times, contributor signals). None of this is personal data about you as a visitor.

Some of those fields are produced with the help of a third-party language model API: public repository descriptions and topic text are sent to it to generate collection labels and one-line summaries. No visitor data, and no private repository data, is involved.

Keeping the endpoints usable

The public data endpoints under /api (repositories, a single repository, collections, early signals and briefs) have a counter in front of them: 120 requests per minute per caller. Counting requires telling callers apart, so the caller's IP address is turned into a hash and only that hash is held, next to the number of requests in the current minute. The counter lives in the memory of the running server process: it is not written to a database or a file, it holds only the current minute for each caller, and it disappears when the process restarts. Because the site can run on several server instances, each instance counts on its own, so the limit applies per instance. It exists to stop misuse of the endpoints; it is not a history of visits and is not used for anything else.

Third parties

• Vercel: hosting and server logs (see above).
• GitHub: the source of the repository data. Neither your browser nor the website's server calls GitHub when you visit these pages; the separate data pipeline does, on a schedule. Clicking through to a repository takes you to github.com, where GitHub's own privacy policy applies.
• Reddit — when you open a repository page, our server may ask Reddit's public search feed for recent posts that link to that repository (at request time; the answer is cached for several hours and is not stored in a database). That request is made by our server, not your browser: it carries the repository's address and our own user agent, nothing about you, and Reddit does not see your IP address. Hacker News mentions are collected by the pipeline in advance and published with the data set.
• A language-model API provider: as described above, for classification only.

Your choices and rights

Because no personal data is collected from visitors, there is nothing stored to access, correct, or erase on your behalf. If you believe something here does concern you personally (for example, you own a repository listed on the site), write to a GitHub issue or a direct message to @punchkub147 and we will respond. Repository owners can ask for a correction or for the project to be removed; the process is described on the terms page.

Children

This site is not directed at children under 13 and does not knowingly collect anything from them.

Changes to this page

This page changes when our practice does: the date at the top is when the text last changed. It was last changed to describe that the site no longer keeps a visit counter or a database of its own, and how the rate limit and the Reddit lookup work. If we ever add something that needs a cookie, it will be disclosed here before it is set.

Contact

Questions about this page go to a GitHub issue or a direct message to @punchkub147.