Legal
Privacy Policy
Global privacy baseline for MakerRelay.
Last updated June 24, 2026
Global scope
MakerRelay is a global app directory and does not target a specific country. This policy is written as a general privacy baseline. Country-specific rights, notices, opt-outs, and addenda apply only when the relevant law applies to MakerRelay or to your use of the service.
Contact
For privacy questions or rights requests, contact MakerRelay at [email protected].
What MakerRelay is
MakerRelay helps people discover and promote apps, tools, projects, repositories, and other products. Some information you submit is meant to be public so the directory can work.
Information we collect
- Account and sign-in data from Google or GitHub, such as email address, display name, provider account id, GitHub username, email verification status, and avatar or profile image metadata.
- Profile and directory data you provide, such as profile handle, social handles, listing names, descriptions, URLs, tags, tech stack, upvotes, and related moderation or ownership records.
- Technical and security data, such as session cookies, temporary OAuth cookies, browser or user-agent details, request logs, IP-derived security information, and reliability events.
- Support communications you send to MakerRelay.
- Public GitHub repository metadata and trend signals, such as repository owner, name, URL, description, language, topics, stars, forks, and star history snapshots.
How we use information and legal bases
- Authentication and accounts: to sign you in, maintain sessions, and secure accounts. Where a legal basis is required, this is generally service performance, consent where required, and legitimate interests in account security.
- Directory publishing: to show public profiles, listings, links, tags, upvotes, and owner attribution. Where a legal basis is required, this is generally service performance and legitimate interests in operating a directory.
- GitHub trend discovery: to display public repository metadata and trend signals. Where a legal basis is required, this is generally legitimate interests in providing discovery features based on public information.
- Security, reliability, abuse prevention, support, and compliance: to protect MakerRelay, debug issues, answer requests, enforce terms, and meet applicable obligations. Where a legal basis is required, this is generally legitimate interests or legal obligations.
Required and optional information
Signing in, submitting a listing, updating a profile, or contacting support is voluntary. If you do not provide account data, you may not be able to use signed-in features. If you do not provide listing or profile data, MakerRelay may not be able to publish or manage that content.
Public and private information
- Public information can include listing content, listing links, tags, tech stack, upvote counts, public owner display name, profile handle, social handles, and public GitHub repository metadata.
- Private account information can include email address, OAuth provider identifiers, session records, security logs, and support messages unless you choose to publish that information yourself.
- MakerRelay does not intend to sell personal information or share it for cross-context behavioral advertising. If that changes and a law such as the CCPA applies, MakerRelay will provide the required notice and opt-out.
Sharing and recipients
- Public directory information is visible to visitors and users.
- Google and GitHub process sign-in information under their own terms and privacy notices.
- Profile avatar URLs are not generated from email address hashes by default.
- Infrastructure, database, logging, security, and support providers may process information only as needed to run and protect MakerRelay.
- Information may be disclosed if required to comply with law, protect rights and safety, investigate abuse, enforce terms, or complete a business transfer such as a merger or acquisition.
Retention and deletion
- Temporary OAuth cookies are intended to last for the sign-in flow and expire after about 10 minutes.
- Session cookies are intended to last up to 30 days unless you sign out, the session expires, or the session is revoked.
- Account, OAuth, profile, upvote, and listing records are kept while your account or submitted content remains active, then deleted, anonymized, hidden, or retained only as needed for security, dispute resolution, backups, legal obligations, or terms enforcement.
- Removed listings may remain in restricted records and backups for a limited period where needed for abuse prevention, auditability, support, or legal reasons.
- Public GitHub repository metadata and trend snapshots may be retained while useful for directory history, analytics, quality, and abuse-prevention purposes.
- Support messages and legal records are kept as long as needed to resolve the request and protect MakerRelay, users, or third parties.
- Backups and logs may not be deleted immediately from every system, but they expire or are overwritten according to normal backup and security cycles.
Your choices and rights
- You can choose not to sign in, but some features require an account.
- You can update profile and listing information from the product controls that are available to you.
- You can request access, correction, deletion, export, restriction, objection, or withdrawal of consent where those rights apply.
- You can contact MakerRelay at [email protected] to make a privacy request. MakerRelay may need to verify your request before acting on it.
- Where applicable, you may also have the right to complain to a privacy regulator or supervisory authority in your location.
Third-party services
MakerRelay supports Google and GitHub sign-in. Sign-in tokens may be used during OAuth to complete authentication and fetch profile or email information, but MakerRelay does not store Google or GitHub access tokens. MakerRelay may also display public GitHub repository information, which remains subject to GitHub's own policies, including the GitHub General Privacy Statement and GitHub Terms of Service. Google and other third-party services process information under their own terms and privacy notices.
Cookies
MakerRelay uses necessary cookies for sign-in, OAuth flow protection, session management, and security. These cookies are not used for third-party advertising. If MakerRelay later adds optional analytics, advertising, or non-essential cookies, the privacy notice and consent controls will be updated where required.
International use
MakerRelay may process and store information in countries other than where you live. When applicable law requires transfer safeguards, MakerRelay will use appropriate safeguards for those transfers, such as contractual, adequacy, or other legally recognized mechanisms.
Automated processing
MakerRelay does not use automated decision-making intended to produce legal or similarly significant effects about you. Search, ranking, recommendation, and trend features may use signals such as listings, tags, upvotes, usage context, and public GitHub metadata to organize directory content.
Sensitive information
Do not submit sensitive personal information, private credentials, secrets, or confidential third-party information in public profiles or listings.
Children
MakerRelay is not directed to children. Do not use the service if you are below the minimum age required to use online services in your location.
Updates
We may update this policy as MakerRelay changes. The updated version will be posted on this page with a new last-updated date.