Privacy policy
You can browse AI Plugin Index without an account and without any cookies. If you sign in, we keep your email, your name and picture from GitHub or Google, and the listings you save, upvote, add to stacks or claim. You can download or delete all of it from your account settings.
Updated
Who we are
AI Plugin Index (aipluginindex.com) is run by Aljaz Peklaj s.p., Rakovnik 82, 1215 Medvode, Slovenia (registration number 8938741000, VAT SI79240291). We decide how your data is used (we are the data controller). Contact: hello@aipluginindex.com.
If you only browse
- We do not set tracking or advertising cookies and do not need a cookie banner.
- We count visits with Cloudflare Web Analytics and PostHog (hosted in the EU). Both run without cookies and without identifying you. PostHog records which pages are viewed and a few actions, such as copying an install command or clicking a sponsor, to show sponsors and makers how their placements perform.
- Your browser stores your colour theme and, if you sign in, your session. This stays on your device.
- Our host, Cloudflare, processes your IP address to deliver pages and stop attacks.
If you create an account
| Data | Why | Legal basis |
|---|---|---|
| Email address | To sign you in and to contact you about your account and claims | Contract |
| Name, profile picture, GitHub username, sign-in provider IDs | To show your account and to check which repositories you own when you claim one | Contract |
| Saved listings, upvotes, stacks, claims | The features you use. Upvote totals are public without names. Stacks are private unless you make them public, which shows the stack and your display name. | Contract |
| Sign-in times and IP address in sign-in logs | Security and abuse prevention | Legitimate interest |
We do not sell your data, show you personalised ads or send your account data to AI models. Claimed listings show "Claimed by maker" and your GitHub username in the page details.
Who processes it for us
- Supabase: database and sign-in. Data is stored in the United States (AWS, us-east-1).
- Cloudflare: hosting and cookie-free analytics.
- PostHog: cookie-free analytics, stored in the EU (Frankfurt).
- GitHub and Google: only if you choose to sign in with them.
- Resend: sends sign-in links, account emails and the newsletter (only if you subscribe).
- Stripe: payments, if you buy a sponsorship or a maker plan. We never see your card details.
Where data leaves the European Economic Area, these providers use the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
- Account data: until you delete your account.
- Sign-in logs: as long as our providers keep them, usually up to 90 days.
- Payment records: as long as tax law requires.
Your rights
You can see, download, correct and delete your data. Download it and delete your account in account settings, or email us. You can also object to processing based on legitimate interest and complain to a data protection authority, for example the one in your country.
Changes
If we change this policy in a way that matters, we update the date above and tell signed-in users by email.