Privacy Policy

What we collect

• • Email address — for waitlist, maintainer/sponsor dashboards, and notifications.
• • Consent proof — a salted hash of your IP and a timestamp, recorded when you join the waitlist. We never store your raw IP.
• • Impression data — when a badge renders, we log the repo slug, sponsor served, a separate salted hash of the viewer IP, and a timestamp. Raw IPs are never stored.
• • Repo metadata — slug, owner, name, star count, language, and description for repos listed in our directory.

How we use it

• • To send launch updates and dashboard magic links (you can unsubscribe anytime).
• • To count impressions and calculate sponsor spend + maintainer earnings.
• • To display coarse-bucketed repo stats on the public directory.
• • To prevent abuse (rate limiting, honeypot, CAPTCHA).

We never sell your data. We never share it with third parties for marketing.

Consent proof (GDPR Art. 7(1))

When you join the waitlist, we record a salted HMAC-SHA256 hash of your IP address and the timestamp. This is sufficient to demonstrate consent without storing personally identifiable data. The salt is stored server-side in environment variables, not in the database.

Retention

• • Waitlist entries: retained until you request deletion, or 24 months after you unsubscribe.
• • Consent records: 24 months after unsubscribe, then purged.
• • Impression logs: retained for billing transparency, aggregated after 90 days, purged after 24 months.
• • Dashboard sessions: expire after 15 minutes.

Your rights

Under GDPR and similar regulations, you have the right to:

• • Request a copy of your data (data export).
• • Request deletion of your data (right to be forgotten).
• • Withdraw consent at any time.
• • Object to processing.

To exercise any of these rights, email privacy@badgemint.dev. We respond within 30 days.

Stripe Connect

Payouts to maintainers are processed via Stripe Connect. Stripe is a separate data controller for your banking information. Their privacy policy applies to that data: stripe.com/privacy.

Contact

Questions about this policy? Email privacy@badgemint.dev.