Privacy

What we store

Your email (sign-in), your payout wallet addresses (public by nature), your listings, sale records (payment ids and transaction hashes, also public on-chain), and store-traffic events kept as a hashed IP with coarse location (city at most). Anonymous searches are counted in aggregate: the query text and result count, never who asked. Session cookie only; no advertising trackers anywhere.

Who touches it

checkout402 settles payments; GitHub serves repository data under the access you granted; Resend delivers sign-in links and sale notifications; our infrastructure runs on Render and Supabase. We sell data to no one.

What we never see

Buyers’ private keys, sellers’ funds, or your GitHub key in plaintext (encrypted at rest, decrypted only inside delivery). Wallets generated on this site are created in your browser; key material never reaches us.

Removal

Delist any repo any time (its checkout is voided). For account deletion, write to the address on your receipts; sale records and on-chain history are permanent by nature and survive account deletion.