Public policy

Privacy policy

Public search uses a minimal data boundary. No account or upload of your local DSH environment is required.

Effective: 2026-09-04 · Browse Beta

What the website processes

To serve a network request, public pages and APIs temporarily process IP address, User-Agent, request time, and path. The application currently has no advertising or behavioral analytics SDK and builds no personal profile. One one-year language preference cookie (registry_locale) is used.

What the plugin manager sends

A default Registry search sends only the query, a locale inferred from that query, and a result limit. It does not send a DSH Profile, installed inventory, local paths, file contents, credentials, complete conversation transcripts, or internal system state. npm and GitHub inspection continues locally.

Retention and sharing

Catalog data comes from public sources. Browse Beta does not retain search history or user identity and does not sell personal information. Infrastructure may create short-lived technical records for security and availability; any formal retention will be preceded by a published retention period, access scope, and deletion process.