Privacy Policy

Last updated: 2026-10-03

Overview

Registry Pulse displays public download statistics. It does not run user accounts, analytics, or crash reporting. It is not true that nothing leaves the machine: the dashboard and the desktop app call the hosts listed below. A GitHub personal access token you paste into the dashboard can sit in sessionStorage.

Data Collection

Registry Pulse does not operate its own accounts or telemetry. Specifically:

  • No user accounts or sign-in to Registry Pulse
  • No analytics or telemetry
  • No cookies or tracking
  • No advertising
  • No crash reporting

A GitHub PAT you choose to save is kept in the browser under the sessionStorage key rp-gh-pat (cleared when the tab closes). It is not sent to a Registry Pulse server.

Network Requests

The dashboard calls these hosts:

  • cdn.jsdelivr.net — Chart.js, the zoom plugin, Hammer.js, and jsPDF
  • en.wikipedia.org — assistant web search (/w/api.php)
  • api.github.com — only when a GitHub PAT is supplied. The token is sent as Authorization: token …
  • http://localhost:11434 — local Ollama (/api/tags, /api/chat, and /api/generate for a local model). The picker defaults to a cloud model. The page talks only to that daemon, which can proxy the prompt — including the injected portfolio snapshot — off the machine
  • http://localhost:11435 — optional local voice server
  • SearXNG, only if you run it. The default base is http://localhost:8888. A different base you type is stored in localStorage and then requested
  • Same-origin data/stats.json on the web dashboard

The desktop app, on refresh, downloads https://mcp-tool-shop-org.github.io/registry-stats/data/stats.json when no portfolio is saved. A saved portfolio is not uploaded. Refresh sends each saved name to the public registry that holds it: api.npmjs.org, pypistats.org, azuresearch-usnc.nuget.org, marketplace.visualstudio.com, hub.docker.com, and api.github.com. An npm maintainer marker also calls registry.npmjs.org. The bundled dashboard makes the same calls as the web dashboard.

Local Storage

On Windows the desktop app writes config\packages.json and cached data\stats.json under %LOCALAPPDATA%\RegistryPulse. That cache is not uploaded as a sync. The dashboard can keep a GitHub PAT in sessionStorage, and it keeps chat history, the selected model, the SearXNG base URL, and a public org-repo summary in localStorage. The PAT is sent only to api.github.com.

Third-Party Services

Registry Pulse does not integrate analytics, advertising, or crash reporting. Chart and PDF scripts are loaded from cdn.jsdelivr.net. Wikipedia, GitHub (when a PAT is supplied), and an optional SearXNG base are contacted as listed above.

Open Source

Registry Pulse is open source. You can review the complete source code at github.com/mcp-tool-shop-org/registry-stats.

Contact

For questions about this privacy policy, open an issue on the GitHub repository.