PlugEmDash

Legal

Privacy Policy

Overview

This Privacy Policy explains what information PlugEmDash collects when you visit the site or create an account, why we collect it, and what we do with it. It applies to the public catalog, account features, publisher dashboard, and admin tools (collectively, the "Site").

We try to keep data collection minimal and tied to features that you can see on the Site. We do not run third-party analytics or advertising trackers.

Who We Are

PlugEmDash is an independent directory of plugins for the EmDash CMS. We are not affiliated with, endorsed by, or otherwise officially connected to EmDash CMS, Cloudflare, or any of their parent companies or affiliates. For privacy questions, contact us at legal@plugemdash.com.

Information You Provide

Account information. When you sign up, we collect your email address and (if you choose password sign-in) a hashed password. You can also sign in using a magic link sent to your email, or with GitHub or Google. When you use a social provider, we receive basic profile information from that provider — typically your name, email, avatar URL, and provider username (for example, your GitHub username) — so we can create or link your account.

Profile and publisher information. Information you add about yourself or your publisher profile, such as a display name, links, and any details shown on your public publisher page.

Plugin listings and uploads. Plugin metadata you submit — name, descriptions, categories, tags, links, license, pricing model, repository URL — together with images you upload (icons and screenshots). Listings and their public metadata are intended to appear in the public catalog once approved.

Communications. Messages you send us, support requests, and information you provide during account recovery, moderation appeals, or copyright reports.

Information We Collect Automatically

Authentication and session data. When you sign in we set a session cookie used to keep you logged in. We also store records of email verification, password resets, magic-link issuances, and connected social accounts so that authentication works correctly and can be audited if abused.

Server logs. Like most websites, our servers keep request logs that may include IP address, user-agent, request path, response status, and timestamp. Logs are used to operate the Site, debug issues, prevent abuse, and apply rate limits.

Moderation events. Actions taken on listings — submission, approval, rejection, archive, feature, edit-after-approval, and similar — are recorded together with the actor and timestamp. This history is needed for moderation accountability.

Error reports (optional). If error reporting is enabled in our environment (using Sentry), unexpected errors may be sent to that service together with technical context such as the URL, stack trace, and a user identifier so we can correlate the report with an account.

Cookies

We use cookies that are necessary for the Site to work — primarily a session cookie that keeps you signed in, and small cookies used to protect form submissions. We do not use third-party advertising cookies. We do not currently run third-party analytics.

You can clear cookies through your browser, but doing so will sign you out and may break parts of the Site that require a session.

How We Use Information

We use the information described above to:

  • Create and secure your account, sign you in, verify your email, and recover access
  • Display your public publisher profile and your approved plugin listings
  • Send transactional email such as verification, password reset, welcome messages, magic-link sign-ins, and moderation updates
  • Operate and improve moderation, including reviewing submissions, recording moderation events, and (where used) sending admin notifications via Telegram to internal moderators
  • Run security and abuse-prevention measures, including rate limiting, security headers, and reviewing logs for suspicious activity
  • Diagnose problems and fix bugs
  • Respond to support, legal, copyright, and privacy requests

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Service Providers and Where Data Lives

We use a small number of providers to run the Site. They process data on our behalf and only for the purposes described here:

  • Hosting and database — our application servers and a Postgres database hold accounts, listings, moderation history, and related metadata.
  • Object storage (S3-compatible / RustFS) — stores files you upload, including plugin icons and screenshots.
  • Mailgun — sends transactional email (verification, password reset, magic links, moderation notifications, welcome mail). Mailgun receives the recipient address and message content needed to deliver the email.
  • GitHub and Google — only when you choose to sign in or connect with them. We exchange identity information with the provider you choose; we do not receive your password.
  • Sentry (optional) — receives error reports if enabled in our environment.
  • Telegram (admin only) — when admin notifications are enabled, summary information about moderation events is sent to approved internal chat IDs. Telegram is not used to message end users.

We may also disclose information when required to comply with law, to enforce our Terms of Service, to investigate suspected fraud or abuse, or to protect the rights, property, or safety of users or the public.

What Is Public

The following information is intentionally public once you publish or once a listing is approved:

  • Your publisher display name and any links you place on your public profile
  • Approved plugin listings, including descriptions, categories, tags, icons, screenshots, and external links you provide
  • Articles, marketing pages, categories, and tags published through the editorial CMS

Email addresses, password hashes, session data, and unapproved drafts are not public.

Admin Access and "Login As"

Site admins have access to account and listing data needed to operate the Site, moderate submissions, and provide support. The Site supports an admin "Login as" capability used to debug issues from a publisher's perspective. Use of this capability is restricted to admins and is intended for support and debugging only.

Data Retention

We keep account and listing data for as long as your account is active. Some records — including moderation events, security and abuse logs, email-delivery records, and backups — may be retained for a longer period because they are needed for safety, dispute resolution, or to satisfy legal obligations.

If you delete your account or ask us to remove your data, we will remove or anonymize the personal information we hold about you, except where we need to keep specific records (for example, moderation history tied to public listings, or logs needed to investigate abuse).

Your Rights

Depending on where you live, you may have rights over your personal information, including:

  • Accessing the information we hold about you
  • Correcting inaccurate information
  • Deleting your account and associated personal information
  • Objecting to or restricting certain processing
  • Receiving a copy of your information in a portable format

To exercise any of these rights, contact legal@plugemdash.com from the email address associated with your account so we can verify the request. We may need additional information before acting on a request.

Children

The Site is not intended for anyone under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact legal@plugemdash.com and we will remove it.

International Users

The Site may be accessed from anywhere in the world. By using the Site, you understand that your information may be processed and stored in countries other than the one you live in, and that data-protection laws in those countries may differ from your own.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the bottom of the page reflects the most recent revision. If we make material changes, we will take reasonable steps to make those changes visible.

Contact

For privacy questions or to exercise your rights, contact legal@plugemdash.com.

Last updated: 2026-04-28