Privacy
Last updated 2026-08-30. This page describes this website and the dsh-market plugin. It is written from the code, not from intent — every claim below is checkable in the repository.
The short version
The plugin sends nothing about you anywhere. It downloads what you ask it to download. This website counts visits without cookies and without identifying you, and carries Google ads, which do use cookies.
This website (dshmarket.com)
Analytics
We use Cloudflare Web Analytics. It is cookie-less and does not fingerprint or track you across sites. It records page views and coarse technical facts — referrer, country, browser and device class — which Cloudflare aggregates. We see counts, never individuals. See Cloudflare Web Analytics.
What the page loads
One request to awesome-dsh-plugin.com, to display the current number of plugins in the catalog. Nothing about you is included in it. Plugin screenshots load from raw.githubusercontent.com, the same host they live on in their own repositories, and ads from pagead2.googlesyndication.com. There are no third-party fonts and no other scripts.
Comments
Each plugin page carries a comment thread, which lives in GitHub Discussions and is rendered by giscus in an embedded frame. That frame is not loaded up front: it is requested only once the comment section comes close to the screen — on most pages, after you scroll past the README — and only then do giscus.app and GitHub receive your IP address, as any web server must to answer a request. Reading needs no account. Posting a comment or a reaction signs you in to GitHub through giscus, and what you write is a public GitHub Discussion in the awesome-dsh-plugin repository, governed by GitHub's terms — we store none of it ourselves. See the giscus privacy policy.
Hosting
The site is served by GitHub Pages. Like any web server, GitHub receives your IP address in order to answer the request. See the GitHub Privacy Statement.
Cookies
This site sets none of its own. Google sets cookies for the ads — see below.
Advertising
This site carries ads from Google AdSense. Google sets cookies to serve and measure them and receives your IP address with each ad request. You can change what Google does with your data at My Ad Center.
The dsh-market plugin
The plugin runs inside your own DeepSeek Harness, on your machine. There is no dsh-market account, no server we operate, and no telemetry. We cannot see what you install.
What it connects to, and why
| Destination | When | What is sent |
|---|---|---|
awesome-dsh-plugin.com | Opening the market | A plain request for the catalog. No identifier. |
registry.npmjs.org, github.com | Installing or checking updates | The name of the package being fetched — the same request any install would make. |
raw.githubusercontent.com | Only after you open an install dialog | A request for that plugin's screenshots. |
api.github.com | Update checks for GitHub-sourced plugins | The repository being compared. |
get.pnpm.io | Only if you use the one-click pnpm setup | A download request. |
Requests you initiate go where you point them: WebDAV backups to the server you configure, and Gist sync to gist.github.com with the token you supply. Neither happens unless you set it up.
What stays on your machine
- Backups are files in your profile. They may contain credentials from your configuration — the interface warns you before you export or upload one.
- Your WebDAV password is never stored in the browser.
- Browser storage holds interface state only — which tab you had open, a pending install being recovered, a dismissed notice. No identifiers, no history of what you install.
- Exported logs are produced for you to read and attach to a bug report. Home paths and credential shapes are masked, and the file is never uploaded anywhere by us.
Contact
Corrections and questions: open an issue. If something on this page does not match the code, that is a bug and we want to hear about it.