1. Information we collect
We may collect account email addresses, authentication events, API keys, scan requests, package specifications, usage metrics, billing identifiers, support messages, and technical logs needed to operate and secure the service.
2. Package and scan data
PkgRadar is designed for static package analysis. Public registry package names, versions, metadata, and derived candidate intelligence may be processed and displayed publicly. Private account usage and API activity are used to provide the service and enforce quotas.
3. How we use information
We use information to authenticate users, operate scans and CI gates, maintain campaign intelligence, process payments, prevent abuse, improve reliability, and communicate about the service.
4. Service providers
We may use providers for infrastructure, email delivery, analytics, payments, logging, and security. These providers process information on our behalf according to their service terms and privacy commitments.
5. Analytics and cookies
We use Google Analytics 4 to understand how the website is used — pages visited, referring sites, approximate location, and device and browser characteristics. Google processes this data on our behalf; Google Analytics 4 does not retain individual IP addresses in your reports.
Cookieless by default; no analytics cookies until you consent.Google Analytics runs in Google Consent Mode with storage denied by default: until you choose “Accept” on the cookie banner, it sets no analytics or advertising cookies and stores no identifier for you in your browser — it only sends aggregate, cookieless measurement that Google uses for modeled traffic estimates. If you Accept, we enable standard cookie-based Google Analytics; if you Decline, it stays cookieless. We never use Google Analytics for advertising or ad personalization. The only cookie we set before consent is a small record of your choice (pkgradar-consent); clear that cookie/storage to be asked again. You can learn how Google handles analytics data at policies.google.com/privacy and opt out across sites with the browser opt-out add-on.
6. Security
We use technical and organizational safeguards intended to protect service data. No system is perfectly secure, and you are responsible for protecting your own API keys, sessions, and CI secrets.
7. Retention
We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security or audit records.
8. Your choices
You may request access, correction, deletion, or export of applicable personal information by emailing [email protected]. Some information may be retained where required for security, legal, or operational reasons. You can also export or permanently delete your data yourself at any time from your dashboard settings.
9. Operator
PkgRadar is operated by Zenofex LLC. Company information is available at zenofex.com.