Privacy policy

• From GitHub at sign-in: your username, numeric ID, display name, avatar URL, public email, and the organizations whose membership is public. We also receive an OAuth access token scoped to public_repo, read:user, user:email, and read:org.
• What you give us: projects you submit (title, tagline, description, screenshots, repo URL, demo video URL).
• From your interactions: the projects you swipe on (and direction), saves, access requests you send to closed-source makers.
• Operational logs: request paths, status codes, and error messages for ~30 days. We do not log your OAuth token, ever.

• Auto-star repos when you swipe right. The only reason we hold your GitHub token. Encrypted at rest with a key we never expose to the browser.
• Personalize your feed. Your swipe history informs what shows up next. Stays on our servers.
• Power the leaderboard + creator pages. Public counts of right-swipes per maker. Aggregate counts only — your individual swipes are private.
• Send you emails. Transactional only: weekly digest of your project performance, and access requests sent to your projects. Unsubscribe anytime in settings.

GitHub (when starring/unstarring on your behalf), Supabase (database hosting), Vercel (web hosting + analytics), and SendGrid (transactional email). That's the full list. We don't sell or rent data, and we don't share with advertisers.

We use Vercel Analytics for traffic counts. It does not use cookies and does not identify you across sites. Sign-in uses a session cookie issued by Supabase Auth — required for the app to work.

• Export: email support@ashlr.ai and we'll send you a JSON dump of everything tied to your account within 7 days.
• Delete: same address, same SLA. Deletes projects, swipes, OAuth token, and account row. Public pages of deleted projects 404 immediately.
• Revoke GitHub access: visit github.com/settings/connections and remove Stargaze. Your repo stars stay; future swipes stop firing.