Privacy policy

Short version: the CLI collects nothing. The website collects what an account and a payment need, and nothing to track you.

The muxd CLI

The CLI has no telemetry. It reads your project's manifests on your machine and downloads public documentation from package registries (npm, crates.io, docs.rs, PyPI, the Go proxy) and from the libraries' own websites. Those requests reach those services directly, not us. It only talks to the muxd API when you use registry commands (pull, push, create) or tip.

Your account

• Email and optional name, to sign you in. Stored by Supabase, our authentication provider.
• API tokens: we keep a hash, a label and when each was last used, never the token itself.
• Registry publications are public by design, and linked to your account so only you can update them.

Payments

Tips and subscriptions go through Polar, the merchant of record. Polar collects your payment details and billing address; we receive the purchase, its amount and your subscription status, never your card.

Analytics and logs

If enabled, we measure visits with Rybbit, a cookieless analytics tool that doesn't identify you. Our servers keep standard access logs (IP address, request, time) for security and debugging, for a limited time.

Who processes your data

• Supabase: accounts and the registry database.
• Polar: payments, invoices and taxes.
• Our hosting provider: see the legal notice.

Your rights

You can access, correct, export or delete your data, and object to its processing. On request we delete your account, profile and tokens; registry entries you published can be deleted or transferred. Write to contact@muxd.dev. If you're in the EU and unhappy with our answer, you can complain to your data protection authority.