Privacy Policy

This page explains what personal data opensourcelist.dev collects, why, and what you can do about it. opensourcelist.dev is a curated directory of open source software; it has no accounts, no comments and no tracking beyond what is described here.

Who is responsible

The data controller is Pasquale Gallo, VAT IT03599370362, Modena, Italy. You can reach him at hello@opensourcelist.dev.

What we collect and why

Visiting the site

opensourcelist.dev is a static website hosted by Hostinger (Hostinger International Ltd, Cyprus, with servers in the EU). Like every web server, the host keeps technical logs (IP address, browser, pages requested, time) for security and to keep the service running. Legal basis: legitimate interest. Retention: as set by the host, typically a few weeks.

Analytics

With your consent we use Google Analytics 4 to understand which pages and listed projects get visited. Analytics runs only after you click "Accept" in the cookie banner; if you decline, nothing is loaded and no analytics cookie is set. IP addresses are anonymised. Data is processed by Google Ireland Ltd and may be transferred to the United States under the EU–US Data Privacy Framework. Legal basis: consent, which you can withdraw at any time from the small yellow dot in the bottom-right corner of any page. Retention: 14 months on Google's side.

Submitting a site

When you suggest a site through the form we receive the name, URL, category and location you enter, plus your email address, and we keep them in our mailbox (hosted by Infomaniak, Switzerland) to review the suggestion and reply if needed. The suggested site may be added to the directory with a screenshot; your email address is never published. Legal basis: performance of your request. Retention: up to 12 months after the review.

Newsletter

If you subscribe, the form posts your address to this site's own server, which passes it to Brevo (Sendinblue SAS, France — servers in the EU) to store it and send the newsletter. Subscription requires confirmation by email (double opt-in): nothing is stored until you click the link. Every message has a one-click unsubscribe link. Legal basis: consent. Retention: until you unsubscribe.

Sponsored links

Some entries are paid placements. They are labelled "Sponsored" on the card and on their own page, and their link goes through /go.php on this domain, which records the date, which entry was clicked, the page you came from and a one-way hash of your IP address that changes every day — enough to tell repeat clicks from different people, useless for identifying anyone — and then sends you to the sponsor. No cookie is set and the sponsor is told the number of clicks, nothing about who clicked. Legal basis: legitimate interest in measuring what we sell. Retention: 12 months.

Listed sites

The gallery shows the public name, URL, location and a screenshot of websites. This information is already public; it is published under our legitimate interest in running a directory. If you own a listed site and want it changed or removed, write to hello@opensourcelist.dev and it will be done promptly.

Cookies

See the Cookie Policy for the full list. In short: one technical entry in your browser storage remembers your cookie choice, and Google Analytics cookies are set only after consent.

Your rights

Under the GDPR you can ask to access, correct, delete or export your data, restrict or object to its processing, and withdraw consent at any time. Write to hello@opensourcelist.dev. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes

This policy may be updated when the site changes; the date at the top tells you when. Substantial changes will be noted on this page.