What we collect, plainly.
TaxOSS is operated by Lurn Digital, Netherlands — see the imprint. Browsing the index needs no account.
Analytics
We do not use product analytics, advertising trackers, session replay, or analytics cookies. Your browser may store your theme preference and whether you dismissed the newsletter invitation; neither value identifies you or leaves your device.
Accounts
Sign-in is handled by Clerk. We store your Clerk user id, display name, avatar, and — if you connect GitHub for a maintainer claim — your public GitHub login. The claim flow reads only your public identity and repository permission level; it has no repository scopes. Contact us to delete this local account mirror.
Newsletter
The featured-projects newsletter runs on Brevo. Subscribing stores your email address there; every issue carries an unsubscribe link, and unsubscribing removes you from the list. Your address is used for nothing else.
Private workspace
Signed-in members can keep one private portfolio containing scope selections, shortlisted projects, decision states, and notes. This data is tied to your account, visible only to you, excluded from search indexing and the public MCP API, and included only when you request your authenticated CSV export. Deleting your local account mirror also deletes its portfolio records.
Project data
Everything shown about a project — stars, forks, issues, license, README, contributors — is public data fetched from the GitHub API and cached server-side. Nothing is scraped from private sources. Maintainers can have their project removed by contacting us.
Hosting
The site runs on Microsoft Azure in the West Europe region (Netherlands). Standard server logs (IP address, request path, timestamp) exist briefly for operations and abuse prevention.
Your rights
Under the GDPR you can request access, correction, deletion, and portability of your data, and you can object to processing. Write to pascal@lurn.digital and we'll sort it out. You can also complain to a supervisory authority; for the Netherlands that is the Autoriteit Persoonsgegevens.