Privacy Policy
Last updated: September 2026
1. Information we collect
When you create an account, we collect your email address and username. During signup, Cloudflare Turnstile processes signals from your browser and device (which may include your IP address) to verify that you are not a bot; we do not see or store the underlying signals ourselves.
When you use paid features, we process payment through Stripe; we do not store your payment card details directly.
When you publish a package to the registry, the package files and metadata you submit are stored using Cloudflare R2 and made publicly available to other users, the same as any public package registry. Do not include personal or sensitive information in a package unless you intend for it to be public.
When you use the download page, we may log the request for analytics purposes. We do not require an account to download the editor.
We log IP addresses on account and registry endpoints for security purposes and to enforce the reasonable rate limits described in our Terms of Service.
2. How we use your information
We use your email address to:
- Send transactional emails (account confirmation, password reset)
- Communicate about your subscription or support requests
We do not sell your personal information to third parties.
3. Third-party service providers
We share information with the following service providers as needed to operate the service, each subject to its own privacy policy:
- Railway - hosts our servers and database
- Stripe - processes payments for paid plans
- Cloudflare Turnstile - verifies you are not a bot during signup
- Cloudflare R2 - stores public package files published to the registry
- Cloudflare Pages and Web Analytics - hosts this site and provides aggregated, cookieless usage statistics
- Resend - delivers transactional email (account confirmation, password reset)
4. Cookies and tracking
We use a single session cookie to keep you signed in. This cookie is HttpOnly and is not accessible to JavaScript on the page. Cloudflare Turnstile may set its own cookies or use similar mechanisms as part of verifying that you are not a bot. We use Cloudflare Web Analytics to understand site usage; it does not use cookies and does not track you across sites. We do not use advertising cookies or trackers.
5. Data storage and security
Account data is stored on servers hosted by Railway. Payment processing is handled by Stripe, and public package files are stored using Cloudflare R2, each subject to its own privacy policy.
6. Data deletion
You may delete your account at any time through the dashboard or by contacting us at contact@io9k.com. Deleting your account removes your account data immediately; it is not held for a retention period. Packages you have published may remain available to other users who depend on them, consistent with our Terms of Service.
7. Children's privacy
The service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at contact@io9k.com and we will delete it.
8. Contact
For privacy-related questions, email us at contact@io9k.com.