Privacy Policy

Information we collect

dsh.plus is built on a collect-as-little-as-possible principle. Apart from the cases below, we do not collect any personal information:

• Anonymous traffic statistics: when you browse public pages we record only the page path and the referring host (e.g. github.com) to understand which content resonates. We store no IP address, no full User-Agent and no cookies for analytics, and common bots are filtered out.
• Like de-duplication: to prevent repeated likes we store a SHA-256 hash of your IP address combined with your browser signature. The hash is one-way — your IP or identity cannot be recovered from it — and is only used together with the plugin ID for de-duplication.
• Submission form: when you submit a plugin for review we collect the plugin name, repository URL, description, category, contact email and an optional note, used solely to review the submission and notify you of the outcome. Only plugin information is published; your email is never shown on the site.
• Rate limiting & security: to prevent abuse (e.g. submission or API flooding) we briefly record IP addresses with the action type and timestamp for request-rate limiting, and purge expired entries periodically.

Local storage (cookies & localStorage)

We use only two functional local preferences. They contain no tracking identifiers and are never used for cross-site identification:

• dsh-theme (localStorage): remembers your light/dark theme choice.
• dsh-locale (cookie, valid for one year): remembers your language choice for the homepage redirect on your next visit.

Third-party services

This site currently runs no third-party analytics, advertising or behavioural tracking scripts. Some page assets (such as plugin screenshots) are served from external services like GitHub; loading them is governed by those services’ own policies.

To keep bots out, the submission page embeds the Cloudflare Turnstile challenge widget. It is operated by Cloudflare under its own privacy policy; the connection data needed for verification is processed by Cloudflare and never stored by this site. The review pipeline may call an AI service configured by the maintainer to help draft review notes, processing the submitted content only.

If we add third-party advertising (e.g. Google AdSense) or analytics in the future, we will update this policy first, disclose the vendors and their cookie usage, and provide consent options as required by applicable law. At that point third-party vendors such as Google may use cookies to serve personalised ads, which you can manage or disable via Google Ads Settings.

Storage & retention

All data lives in a database on servers we operate, with encrypted off-site backups. Retention by data type:

• Anonymous statistics and like hashes: not identifiable to individuals, kept long-term.
• Submission records: kept after review (with status and review notes) to prevent duplicate submissions and for operational auditing; you may request deletion of your own record by email at any time.
• Rate-limit records: kept only briefly and purged after expiry.

Your rights

You may request access to, correction of, or deletion of data related to you. Statistics and like hashes are anonymous and irreversible, so there is normally nothing to act on; submitters can query or delete their submission records by email, and we respond within 48 hours.

Minors

This site is aimed at developers, is not directed at children under 14, and we do not knowingly collect personal information from minors.

Changes to this policy

If the policy changes we will update this page and revise the “Last updated” date; material changes that introduce new categories of data collection will also be announced on the site.

Contact

Questions about this policy, or requests to exercise the rights above: email jiangzhen0812@gmail.com or open an issue on the dsh-plus-web GitHub repository.