Privacy Policy

What we collect from you

• Reading: page counts, described under Page counts below. No cookies are set.
• Claiming a page: the email address the claim link is sent to, and the time it was used. The address is shown masked and never published.
• Submitting a project: the address you submit and the time, with your network address kept for a short while to limit abuse.
• Rating an app: a one-way fingerprint of your GitHub account, never its login; the account's age and how many public projects and gists it has; and the rating. A rating from a running app also keeps the statement the app signed. Your login is never stored or shown with your rating.
• Writing to us: your message and the address you wrote from, kept as long as the matter is open.

Page counts

We count visits to our public pages with Umami, an open-source analytics tool we run on our own servers. It is served from this site, so no analytics company sees your visit. It sets no cookies and uses no identifier that follows you to other sites. Your IP address is used only to estimate your country and city and is not stored; a return visit is recognised within the same month, from the same network and browser, by a salted hash that cannot be turned back into your address.

We record the public page opened, the site that linked to it, campaign tags (utm_*), your browser, operating system, device type, screen size and language, whether you follow a link to claim a page, submit a project or sign in, and counts of scrolling, pointer and key activity that tell a person from an automated browser. We never record what you type or where on a page you click.

Pages behind sign-in are not counted. A private code in a link, such as the code in a claim link, is never recorded. We do not sell this data or use it for advertising.

Your browser keeps the page you first arrived on, the site that sent you and any campaign tags for up to 30 days. If you sign in within that time, these are stored with your account, so we can see which ways in lead people to claim a page.

What we publish from public sources

hAppRadar reads what projects publish on GitHub and in the app files they ship: names, descriptions, marks, releases, commit counts, the versions they build on, and the public profiles of the people who committed. From those profiles it shows a login, a public picture and, on the map, a city taken from a self-declared location. It never shows a home address, an email address or anything not already public.

If you are one of those people and want your login or location left out, write to us; it is removed from the next reading and stays removed.

Who else sees it

The service runs on servers we operate, behind Cloudflare, with anonymous statistics kept in our own analytics and claim emails sent through a transactional mail provider. GitHub sees your sign-in when you rate an app. Nobody receives your data for advertising, and nothing is sold.

How long it is kept

Claim links expire after one use or a few days. Network addresses from submissions are dropped within days. A claim, a submission and a rating stay for as long as the page they belong to, so the page can say who maintains it and what people found. Ask and we delete what is yours.

Your rights

You can ask what we hold about you, have it corrected, or have it deleted, and you can withdraw a rating or a claim at any time. Write to the address below; we answer within a month.

Changes

This policy may change; the date at the top says when.