Privacy
Privacy
Short version: we store as little as possible and say so in plain words. Long version below, with dates.
Everyone
No account needed to read
Every page works without signing in. The only things that need an account are rating a distro, posting a take, voting and reporting. The contact page and everything else stay account-free.
Google Tag Manager
Every page loads Google Tag Manager (container GTM-P5QCKBKK). Tag Manager itself is a loader: the tags inside the container decide what is measured. At the moment those tags are used for analytics, which means visits to pages may be reported to Google, and cookies or similar identifiers may be set in your browser.
You can block it with your browser's tracking protection or a content blocker, and the site works normally without it.
Contact form
The contact page does not send anything to a server. It builds an email draft in your own mail client, and nothing is transmitted until you send it yourself. The message then travels through your mail provider and ours.
Hosting logs
Like any web server, the hosting stack may keep ordinary access logs (IP address, requested URL, browser string) for operations and abuse handling. The site code does not read, store or use them, and the community board does not record IP addresses.
If you sign in to the community board
What we store about you
Signing in uses GitHub with the minimal read:user scope. We keep exactly this:
- Your GitHub numeric id
- Your GitHub login (username)
- Your GitHub avatar URL
- The date your GitHub account was created (used to restrict accounts younger than 30 days)
- The date your board account was created, and whether an admin has banned it
What we do not store
- No email address
- No IP address
- No GitHub access token: it is used for the sign-in itself and then discarded
- No tracking profile of what you read
Content you create
Star ratings (one per distro, which you can change), short takes (up to 280 characters), votes and reports are stored with your account, each with a timestamp so the rate limits can be counted. Takes show your GitHub login and avatar publicly. Ratings feed the public average. Votes and reports are not shown to other users by name.
Cookies
Signing in sets one httpOnly session cookie, which is needed to keep you signed in. It holds your GitHub id, login and avatar URL and your board account id, and nothing else. The Tag Manager point above still applies.
Deleting your data
On your own page, /me, you can delete your account. Deletion is immediate and removes your account, ratings, takes, votes and reports from the database. You can also delete an individual take at any time. If something goes wrong, email the address on the contact page.
Hidden content and retention
Takes hidden by moderation (by three reports or by an admin, including when an account is banned) are purged for good after 90 days by a scheduled job. Account data is kept until you delete it. Database backups, if any are taken by the host, follow the host's own rotation.
Third parties
GitHub handles authentication under its own privacy statement. Google handles Tag Manager traffic under its own. The database is a self-hosted Postgres run by Bongbetic.