Privacy

This site is self-hosted and loads no third-party scripts, fonts, trackers or analytics. Pages are served entirely from our own infrastructure.

GitHub content

Two exceptions connect your browser to GitHub's servers, sharing your IP address and standard request headers with GitHub (github.com / githubusercontent.com):

• Plugin README pages may embed images hosted on GitHub, and plugin downloads link directly to GitHub Release assets.
• Signing in uses GitHub OAuth. We store your public GitHub profile (ID, username, display name, avatar URL) to attribute plugin listings. No email addresses.
• We also store your GitHub access token so we can show the repositories you can publish and check that you still have push access to a listing you manage. The token is kept on our server, is never sent to your browser, is deleted when you sign out, and is only ever used for those two read-only lookups. The only scope we request is read:org (read-only organization membership, needed to find repositories you can publish through an organization) - it grants no write access and no access to private repository contents. You can revoke it any time in your GitHub authorized apps settings.

See GitHub's privacy statement for how GitHub processes those requests.

Cookies

One functional cookie (pnx_session) exists only after you sign in, keeps you signed in for 7 days, and is never used for tracking. Theme preference is stored locally in your browser.