Policy updates

Privacy Policy update

Published: October 14, 2026
New collection begins: October 21, 2026
Read the full policy: Privacy Policy

The short version

Starting October 21, 2026, WarmHub records a usage event on our servers each time you read from or query a WarmHub repository. We use these events only for our own product analytics. Each event is linked to your account by a pseudonymous identifier. You can ask us to stop this, or to erase it, at any time.

What we collect

Each time you read from or query a repository, through the web app, the API, the command-line tools, the SDKs, or a connected AI client, we record one event. An event includes:

• The operation performed and the kind of query
• A rough count of the results returned
• The client and version you used
• How you authenticated
• Whether the request succeeded, and how long it took
• Which repository you accessed, by internal identifier, and whether it is public or private
• The approximate country, taken from your network address when the request is made

What we don't collect

• Your IP address. We use it to work out the country and do not store it.
• Your name or email address
• Repository names or content names
• The contents of your queries

How the events are linked to you

Each event carries a pseudonymous identifier, a keyed code derived from your account or token identifier. Only WarmHub can match it back to you, through a separately held mapping. Because we can do that, we treat these events as personal information.

Why we collect it

We use it only for our own product analytics. It helps us see how new users get started, whether people come back, where things fail or run slowly, and which repositories are read most, so we can decide what to improve.

It is available only to WarmHub's internal administrators. We do not sell it, share it, or use it for advertising.

Our legal basis is our legitimate interest in understanding and improving our own service, balanced against your privacy.

How long we keep it

• The events themselves are kept by our analytics provider for about three months and then deleted automatically.
• The identifier that links events to your account is kept for the life of your account. We delete it when you delete your account or ask us to erase your data. Once it is gone, earlier events can no longer be tied to you.

Your choices

You can ask us to stop this processing, or to erase it, at any time by emailing [email protected], and we will honor the request at no cost. In limited cases we may keep certain account or billing records where we need them to meet a legal obligation, resolve a dispute, prevent fraud or abuse, or establish or defend legal claims. This does not prevent us from deleting the link between the telemetry and your account. Once that link is deleted, earlier events can no longer be tied to you.

Where this appears in the policy

• Section 6, Cookies and Automatic Information Gathering Technologies
• Section 7, Data Retention
• Section 8, Transparency and Choice

The vendors who process this data are listed on our Subprocessors page.

Earlier updates