.dir

Legal

Privacy Policy

Last updated: March 28, 2026

This policy explains what information .dir (dotdir.dev) collects, how we use it, and the choices you have.

1. Information We Collect

We collect information in two ways: information you provide directly, and information collected automatically.

Information you provide

  • Publisher accounts — when you sign up as an extension publisher we collect your email address and a username. We use this to authenticate you and attribute your published extensions.
  • Extension metadata — names, descriptions, version numbers, and other content you submit when publishing an extension.

Information collected automatically

  • Usage analytics — with your consent, we collect anonymised data about pages visited and interactions on dotdir.dev using Google Analytics. This includes approximate location (country/city), browser type, and referral source. No personally identifiable information is included.
  • Extension download counts — we record aggregate download counts per extension version. These are not tied to individual users.
  • Log data — our servers automatically record standard web server logs (IP addresses, request paths, timestamps) for security and debugging. These are retained for a short period and are not used for marketing.

2. How We Use Your Information

We use the information we collect to:

  • Provide and operate the dotdir.dev website and extension marketplace
  • Authenticate publisher accounts and attribute published extensions
  • Display aggregate download statistics on extension pages
  • Understand how visitors use the site so we can improve it (analytics, with consent)
  • Detect and prevent abuse, fraud, or security incidents
  • Respond to support requests or inquiries

We do not sell your personal data. We do not use your data for advertising or share it with ad networks.

3. Cookies & Analytics

We use cookies and similar technologies solely for analytics purposes. We implement Google Consent Mode v2, which means analytics cookies are only set after you explicitly accept. If you decline, no analytics cookies are placed.

CookiePurposeExpires
_gaGoogle Analytics — distinguishes users2 years
_ga_*Google Analytics — session state2 years
cookie-consentStores your consent preference (localStorage)Persistent

You can change your consent preference at any time by clearing your browser's local storage for dotdir.dev, which will cause the consent banner to reappear on your next visit.

4. Third-Party Services

We use the following third-party services to operate dotdir.dev:

  • Google Analytics — website analytics, only active with your consent. Governed by Google's Privacy Policy.
  • Supabase — database and authentication infrastructure. Extension data, download counts, and publisher accounts are stored on Supabase servers. Governed by Supabase's Privacy Policy.

We do not share your personal data with any other third parties.

5. Data Retention

We retain data for as long as it is necessary for the purposes described in this policy:

  • Publisher account data — retained while your account is active. You may request deletion at any time.
  • Extension metadata — retained while the extension is published. Removed upon your request or account deletion.
  • Analytics data — retained for 14 months by Google Analytics per their standard data retention policy.
  • Server logs — retained for up to 30 days for security purposes.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your account and associated data
  • Portability — request your data in a machine-readable format
  • Opt-out of analytics — decline analytics cookies via the consent banner

To exercise any of these rights, contact us at privacy@dotdir.dev. We will respond within 30 days.

If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority.

7. Children's Privacy

dotdir.dev is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of dotdir.dev after changes are posted constitutes your acceptance of the revised policy.

9. Contact

If you have questions about this privacy policy or how we handle your data, please contact us at privacy@dotdir.dev.