Privacy

Short, because there is not much to say.

What we read on GitHub

When a maker adds an app, they install the “Not a Cent” GitHub App on the repos they choose, read-only. We only read commit dates on the default branch, and the repo name, description and language. We never read the code, and we never ask for write permission. Private repos are welcome: only the numbers that come out of them are public.

At install time, GitHub shows “Read access to code”. It is the smallest permission GitHub requires to list a repo's commits: without it, the API refuses even the dates. So we technically could read the code, but we don't. The site is open source, anyone can check: metrics.ts.

What we keep

• The maker's GitHub login, numeric id and avatar, to show “by @login”.
• An encrypted GitHub token, used every night to re-read commit dates.
• The four card fields: link, image, what took the longest, main tool.
• A signed session cookie, to stay signed in. No third-party cookie, no tracker, no analytics.

“Nice one” and clicks are counted per app, never per person.

Unclaimed cards

Some cards are created by us, by hand, from a public repo: the name, description, language, website and commit dates GitHub shows to everyone. They are marked “unclaimed”, carry no badge and no dofollow link, and the maker can take them over by signing in with GitHub. We write once, to the public email on their GitHub profile (or, failing that, the one on their commits), to let them know. That address is used for this one email only and deleted as soon as they reply or claim the card. Never a follow-up. A “no” in reply is enough: the card disappears and the repo is never listed again. Legal basis: our legitimate interest in showing public work, with your right to object in one reply.

Assistants (ChatGPT, Claude…)

Not a Cent exposes a public, read-only MCP server (/api/mcp). An assistant can search apps, read a card or the board: exactly what this website already shows, nothing more. No data from the assistant or its user is stored; there is no account and no token on that side. Listing an app always goes through this site and GitHub.

Removing your app

Uninstall the GitHub App from GitHub, or write to the address below: the card, the token and the numbers are deleted. Card images leave the cache within five minutes.

Who

Not a Cent is handmade by an independent developer in France. Hosted on Vercel, database at Neon (Europe). Contact: meffysto@gmail.com.

Last updated: September 17, 2026.