Privacy Policy

About RepoVerse

RepoVerse at repoverse.app lets you collect cards based on public GitHub repositories. This policy describes the v0.1 service. Contact support@repoverse.app with privacy questions.

Information stored

We store your account name, email address, profile image when provided, authentication records, pack inventory, opening history, collected cards, selected showcase cards and album rewards. Passwords are handled by our authentication system; they are not displayed in profiles.

We use technical request information, including IP addresses and error records, to operate the service and limit abuse. Public repository names, descriptions, statistics and owner avatars come from GitHub.

What other people can see

Your collector name, profile image, collection statistics and up to five cards you choose for your showcase are public. Explore aggregates cards discovered by collectors without listing their email addresses or opening identifiers. Your email, pack balance and complete opening history are not part of the public profile.

Cookies and browser storage

Authentication cookies keep you signed in. A language cookie remembers your locale. Browser storage remembers sound preferences, collection filters and pending opening requests so an interrupted opening can be resumed. You can clear browser storage or sign out; clearing storage does not delete cards saved to your account.

Hosting and service providers

We use Google Analytics 4 to understand page visits and site usage, and Microsoft Clarity for heatmaps and session replay. These services may process page URLs, browser and device details, interactions and cookie identifiers. Clarity masks sensitive content by default. We do not send account emails or passwords as custom analytics properties. When the site's Cookie banner is enabled, your choice controls analytics cookie storage; declining leaves these tools in their modes without cookies. See Google's data use information and Microsoft's privacy statement.

IndexNow receives public page URLs to notify participating search engines about content changes. Account pages and private collection data are not included in the sitemap submission.

The production service uses Cloudflare Workers, D1 and R2 for hosting, account and collection data, and card media. Authentication or transactional email providers process information needed for the options enabled on the sign-in screen. We do not sell account data.

Access, corrections, export and deletion

Change your collector name in Preferences and your showcase on Profile. For account access assistance, a data export or account deletion, email support@repoverse.app from your account email. These requests currently require support assistance; v0.1 does not provide self-service export or deletion. We may need to verify account ownership before acting.

We retain account and collection records while your account is active. Operational backups and records needed to investigate abuse may remain for a limited period after a deletion request is processed.

Changes

We update the date on this page when the policy changes and will communicate material changes through the service.