Public policy
Privacy policy
Public search uses a minimal data boundary. No account or upload of your local DSH environment is required.
Effective: 2026-09-07 · Browse Beta
What the website processes
To serve a network request, public pages and APIs process IP address, User-Agent, request time, and path. When usage analytics are enabled, PostHog US also receives the page path without query parameters, page type, locale, referring domain, valid UTM tags, and a small set of fixed interaction events. The site has no advertising integration, account identification, or personal profiling.
What the plugin manager sends
A Registry search request sends only the query, a locale inferred from it, and a result limit. Separately, anonymous manager telemetry is enabled by default and sends only to dsh-plugins.tech/v1/telemetry/events: manager search, inspection, or planning types and install start, success, or failure. Install events contain the public package name, batch marker, activation/restart booleans, or a bounded error code. The Registry validates the exact schema and forwards it to PostHog with ingestion_source=registry. A stable random ID is stored in the current Profile and is not linked to an account. Only an operator-explicit acceptance run adds the boolean marker is_test=true.
Analytics boundary and choice
Manager telemetry excludes raw search terms, URL queries, DSH Profiles, installed inventory, local paths, file contents, credentials, command output, error text, and conversation transcripts; PostHog person profiles and IP geolocation are disabled. Set RELAY_PLUGIN_MANAGER_TELEMETRY=0 to disable manager telemetry without disabling plugin management. Browser analytics is controlled separately, respects Do Not Track, and disables autocapture and session replay. A session-scoped random identifier stored in sessionStorage links navigation within one tab and expires when that tab session ends. Local previews and production acceptance sessions entered with the dedicated parameter add only is_test=true so growth metrics can exclude them; you can also at any time.
Retention and sharing
Catalog data comes from public sources. We do not sell personal information. PostHog and the serving infrastructure process limited technical records under the project retention settings and operational security needs; the site operator controls the retention period and access scope.