Privacy
Last updated 2026-08-18. This page describes this website and the dsh-market plugin. It is written from the code, not from intent — every claim below is checkable in the repository.
The short version
The plugin sends nothing about you anywhere. It downloads what you ask it to download. This website counts visits, without cookies and without identifying you.
This website (dshmarket.com)
Analytics
We use Cloudflare Web Analytics. It is cookie-less and does not fingerprint or track you across sites. It records page views and coarse technical facts — referrer, country, browser and device class — which Cloudflare aggregates. We see counts, never individuals. See Cloudflare Web Analytics.
What the page loads
One request to awesome-dsh-plugin.com, to display the current number of plugins in the catalog. Nothing about you is included in it. There are no ad networks, no social widgets, no third-party fonts, and no other scripts.
Hosting
The site is served by GitHub Pages. Like any web server, GitHub receives your IP address in order to answer the request. See the GitHub Privacy Statement.
Cookies
This site sets none.
The dsh-market plugin
The plugin runs inside your own DeepSeek Harness, on your machine. There is no dsh-market account, no server we operate, and no telemetry. We cannot see what you install.
What it connects to, and why
| Destination | When | What is sent |
|---|---|---|
awesome-dsh-plugin.com | Opening the market | A plain request for the catalog. No identifier. |
registry.npmjs.org, github.com | Installing or checking updates | The name of the package being fetched — the same request any install would make. |
raw.githubusercontent.com | Only after you open an install dialog | A request for that plugin's screenshots. |
api.github.com | Update checks for GitHub-sourced plugins | The repository being compared. |
get.pnpm.io | Only if you use the one-click pnpm setup | A download request. |
Requests you initiate go where you point them: WebDAV backups to the server you configure, and Gist sync to gist.github.com with the token you supply. Neither happens unless you set it up.
What stays on your machine
- Backups are files in your profile. They may contain credentials from your configuration — the interface warns you before you export or upload one.
- Your WebDAV password is never stored in the browser.
- Browser storage holds interface state only — which tab you had open, a pending install being recovered, a dismissed notice. No identifiers, no history of what you install.
- Exported logs are produced for you to read and attach to a bug report. Home paths and credential shapes are masked, and the file is never uploaded anywhere by us.
Advertising
There is none, and there is no arrangement to introduce any. Should that ever change, this page will say so before it happens, and the change will be visible in this repository's history.
Contact
Corrections and questions: open an issue. If something on this page does not match the code, that is a bug and we want to hear about it.