Privacy Policy

uapkg is an independently operated open source package registry and ecosystem. This policy explains how we handle information when you use our websites, registry, account services, and related tools.

Information We Collect

We collect information you provide, information from services you choose to connect, and information about your use of uapkg:

• Account information: your email address, username, credentials, and any profile or organization details you provide.
• Content and connections: packages and related information, publishing activity, and information you authorize another service to share with us.
• Communications: information you send in support requests, privacy inquiries, or other correspondence.
• Usage information: your IP address, browser and device information, service activity, and diagnostics. We may also collect analytics and limited session recordings as described below.

How We Use Information

We use information to provide and secure uapkg, manage accounts and organizations, publish and distribute packages, support optional features, and send account and service messages. We also use it to understand and improve the service, troubleshoot problems, prevent abuse, respond to requests, and meet legal obligations.

Sharing Information

Packages and information published to public registries, including associated ownership records, are public. Others may copy or retain them independently. Profile information you choose to provide may also be visible to other users.

We use service providers to help with hosting, storage, authentication, content delivery, communications, analytics, and security. They receive information needed to perform those functions. Information may be processed in the United States and other countries where we or our providers operate.

We may also disclose information when reasonably necessary to comply with law or legal process, investigate abuse, protect users and the service, or resolve disputes.

Cookies and Analytics

We use cookies and similar browser storage to keep you signed in, support account features, and protect the service. Browser storage also supports analytics. You can restrict or clear it through your browser, although some features may stop working. Clearing browser storage does not delete information already collected.

We use analytics to understand service usage and performance. We may also record interactions in selected areas to diagnose interface problems, with protections that mask personal text and inputs and exclude sensitive account screens.

Browser analytics and session recording respect Global Privacy Control and Do Not Track signals. Service activity and security records may still be processed independently of these browser controls. Agreeing to this policy during signup is not consent to additional tracking.

Connected Services

If you connect another service, we use the information and authorization you provide to enable that feature. You can disconnect optional connections in settings. The other service handles information under its own privacy policy; disconnecting from uapkg does not delete information held by that service.

Gravatar

Gravatar is optional. When you connect it, we access your profile and store the account identifiers, protected authorization credential, and identifier derived from your email address needed to display your avatar. We do not store your Gravatar password or use this profile data for advertising.

We deliver your image through uapkg and cache copies to load it efficiently. We check connections periodically and refresh cached images at intervals when they are requested, so changes may take time to appear.

Disconnecting in settings removes our stored authorization credential and email-derived identifier and returns your avatar to initials. Cached copies may remain available temporarily, and an image already displayed may remain until the page updates. Limited connection history may be retained as described below.

Disconnecting from uapkg does not revoke authorization at WordPress.com. You can revoke it separately through WordPress.com connected applications. You can also manage your information directly with Gravatar, whose handling of it is covered by the Automattic Privacy Policy.

Retention and Security

We keep information for the purposes described in this policy, including providing the service, maintaining registry integrity, addressing security issues, and meeting legal obligations. Retention varies by the information and its purpose. Some records, including publication and ownership history, security records, and connection history, have no automatic expiry and may remain after you stop using uapkg. Logs and analytics have separate retention periods.

We use reasonable safeguards to protect information, but no service can guarantee absolute security. Report security concerns to security@uapkg.dev.

Your Choices and Rights

You can update your profile, manage optional connections, and adjust your browser’s storage and privacy controls.

Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of your information, restrict or object to its use, withdraw consent, or complain to a data protection authority.

Send privacy questions and requests to legal@uapkg.dev. We may need to verify your identity. Some information may need to remain for legal, security, or registry integrity reasons; we will explain relevant limits when responding. We cannot remove copies independently held by others.

Children

uapkg is not directed to children under 13. If you believe a child has provided personal information contrary to applicable law, contact legal@uapkg.dev.

Changes to This Policy

We may update this policy as our practices or legal requirements change. The current version shows its effective date. We will communicate material changes where required by applicable law.