Privacy Policy
Last updated: February 27, 2026
1. Information We Collect
Account Information
When you sign in with GitHub or Google, we receive your public profile information: name, email address, profile image, and username. We store this to provide your ToolXiv account.
Usage Data
- Page views: We record anonymized (IP-hashed) page views to calculate tool popularity and trending metrics.
- API usage: We log API request counts per key for rate limiting purposes.
Submitted Content
When you submit a tool or claim ownership, the information you provide (repository URL, description, categories) is stored and may be publicly displayed.
2. How We Use Your Information
- To provide and maintain the ToolXiv service.
- To display your profile on tools you submit or claim.
- To calculate trending and impact metrics.
- To enforce rate limits and prevent abuse.
- To communicate service updates (if you opt in).
3. Information Sharing
We do not sell your personal information. We may share information only in these cases:
- Public profile: Your username, profile image, and submitted tools are publicly visible.
- Legal requirements: If required by law or to protect our rights.
4. Data Storage and Security
- Data is stored on secured servers with encrypted connections (TLS).
- IP addresses are hashed before storage; we do not store raw IPs.
- API keys are stored as hashed values; we cannot retrieve your original key.
- Database access is restricted and authenticated.
5. Cookies
We use the following cookies:
- Session cookie: Required for authentication (set by NextAuth.js).
- Locale preference: Stores your language choice.
We do not use third-party tracking cookies or analytics services.
6. Your Rights
- Access: You can view your profile and submitted data through your dashboard.
- Deletion: You can request account deletion by contacting us. This will remove your account and associated data.
- Data portability: You can export your bookmarks and submissions via the API.
7. Third-Party Services
- GitHub OAuth / API: Used for authentication and fetching public repository metadata. Subject to GitHub's Privacy Policy.
- Google OAuth: Used for authentication. Subject to Google's Privacy Policy.
8. Children's Privacy
ToolXiv is not directed at children under 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this privacy policy from time to time. The updated version will be posted on this page with a revised date.
10. Contact
For privacy-related questions, please open an issue on our GitHub repository.