Privacy Policy
Contents
1. Introduction
Welcome to Top 200 Repos ("Top 200 Repos," "we," "us," or "our"). We operate top200repos.com, a platform for discovering and comparing open-source repositories, exploring repository rankings and growth, finding practical use cases for AI agents and developer tools, and accessing related guides, resources, and community features (the "Service").
We respect your privacy and aim to collect only the information reasonably needed to operate, secure, and improve the Service. This Privacy Policy explains what information is handled when you use Top 200 Repos, which information stays on your device, why information is processed, with whom it may be shared, how long it is retained, and the choices and rights available to you.
This Policy applies to visitors, newsletter subscribers, people who submit or report content, and anyone using the Service's optional interactive or account-related features. It does not replace the privacy policies of websites and services that we link to.
By using the Service, you acknowledge that you have been informed of the practices described here. Where applicable law requires consent for a specific activity, we obtain that consent separately rather than treating your use of the website as consent.
2. Who Is Responsible for Your Information?
Top 200 Repos, as the operator of top200repos.com, is responsible for determining the purposes and means of processing personal information collected through the Service, except where a third-party provider acts independently under its own privacy policy.
For questions, privacy requests, complaints, or requests to access, correct, or delete your information, contact us exclusively through:
- Contact Page: https://top200repos.com/contact
- Email: [email protected]
These are the only official contact methods provided for privacy matters under this Policy.
3. Our Privacy Approach
Top 200 Repos is designed around several practical principles:
- Browse without an account. You can explore public rankings, repositories, agents, use cases, and other public content without registering.
- Keep personal choices local where possible. Saved repositories, saved use cases, notes, collections, display preferences, and similar features can be maintained in your browser.
- Limit analytics. Our first-party analytics use aggregate page and action totals rather than advertising identifiers, cross-site tracking cookies, or individual browsing profiles.
- Use public information responsibly. Repository rankings and related metadata are derived primarily from publicly available sources.
- Respect your choices. You can unsubscribe from the newsletter, clear local browser data, and submit privacy requests.
- Do not sell personal information. We do not sell visitors' personal information or share it for cross-context behavioral advertising.
Some technical processing is still required to deliver web pages, defend against abuse, send requested messages, and run the hosting infrastructure. These activities are explained below.
4. Information We Collect or Process
The information involved depends on how you interact with the Service.
4.1 Information You Choose to Provide
We may process the following information when you voluntarily use relevant features:
| Activity | Information Involved | Why It Is Used |
|---|---|---|
| Weekly digest subscription | Email address, selected language, and record of subscription consent | To deliver the requested digest, manage subscriptions, and respect unsubscribe requests |
| Contact or privacy request | Your email address, message, and information you include | To answer inquiries, verify requests where necessary, and resolve issues |
| Use-case submission | Source URL, submitted description, and optional name or handle for credit | To review, assess, attribute where appropriate, and potentially publish a submitted use case |
| Content report or feedback | Reported content, explanation, and information voluntarily included | To review accuracy, safety, abuse, or content quality |
| Voting and interactive features | Vote or action details and a pseudonymous anti-duplication signal | To count legitimate interactions and prevent manipulation |
| Optional account sign-in | Authentication/session data and a one-way hash of an account identifier where the feature requires it | To maintain an authenticated session and associate eligible settings with an account without storing the raw account identifier in the relevant preference record |
Please avoid putting passwords, financial information, sensitive personal information, private source code, or personal information about other people into submission forms, reports, or general messages unless it is strictly necessary for your request.
4.2 Information Stored on Your Device
The Service uses browser-based storage and functional cookies for features that you control. Depending on your activity, locally held information may include:
- Saved repositories, saved use cases, notes, and collections.
- Your theme, preferred language, and interface settings.
- Dashboard interests, language filters, section order, spacing, and other customization choices.
- Your last-visit time and similar convenience information.
- A randomly generated device identifier used for vote-counting and abuse prevention, rather than for advertising or cross-site tracking.
Saved content displayed on the Saved page remains on your device and is not automatically uploaded to our servers merely because you save an item. Information stored locally may be lost if you clear browser data, use a different device or browser, or use a private browsing session.
If you sign in and an eligible setting is synchronized or associated with an account, the server may store that setting against a one-way hash of your account identifier. This is separate from device-only saves.
4.3 Technical and Security Information
When your browser connects to the Service, our hosting, network, and security systems necessarily handle technical request information. This may include an IP address, requested URL, request time, browser or device characteristics, HTTP headers, and diagnostic or security events.
We use this information for website delivery, network operation, incident investigation, service reliability, fraud prevention, and abuse mitigation. Our application is designed to avoid retaining raw IP addresses or raw device identifiers in its vote, rate-limit, submission, and report records; where an anti-abuse association is necessary, it uses one-way hashes. A hash can still qualify as personal information where it can reasonably be linked to an individual.
Infrastructure providers may independently maintain operational or security logs according to their own retention and security practices. Accordingly, the absence of raw IP addresses from a particular application database does not mean that an IP address is never processed when you visit the website.
4.4 Public Repository and Third-Party Content
To provide rankings, historical growth information, repository details, agent listings, use cases, and related content, the Service collects or retrieves publicly available information from sources such as GitHub and linked public resources. Depending on the content, this may include repository names, descriptions, owner or contributor handles, profile images, links, licenses, programming languages, star and fork counts, activity statistics, and publicly attributed source material.
Some publicly available handles, names, images, or descriptions may constitute personal information. We process such information for the legitimate purpose of presenting factual, source-linked information about public open-source projects and related resources. Public availability does not remove a person's privacy rights.
Our rankings and historical snapshots concern repositories and other publicly available content, not confidential GitHub repositories or private account information. If you identify inaccurate or inappropriately displayed personal information, you may contact us to request a review.
4.5 Searches and Usage Events
We may retain search phrases that return no results to understand missing content and improve discovery. These records are intended to be stored without an account or device identity, and strings resembling email addresses are excluded.
The Service also records aggregate counts for pages and actions, such as viewing a page, opening a resource, or copying a prompt. These analytics are described in Section 7.
5. Why We Process Information and Our Legal Bases
Where the EU General Data Protection Regulation (GDPR), UK GDPR, or comparable law applies, the reasons for processing and the relevant legal bases include:
| Purpose | Typical Legal Basis |
|---|---|
| Providing requested pages, search, interface functionality, and optional account features | Performance of a contract or steps requested before entering one, where applicable; otherwise legitimate interests in operating the Service |
| Remembering optional preferences and device-only saved items | Legitimate interests in providing user-requested functionality; consent where required for a particular storage technology |
| Sending the weekly digest | Your consent |
| Receiving and responding to submissions, reports, and inquiries | Legitimate interests in managing communications and improving content; performance of a requested service where applicable |
| Counting votes and preventing automated abuse | Legitimate interests in protecting the integrity, security, and reliability of the Service |
| Maintaining and securing infrastructure | Legitimate interests in operating and protecting the Service; compliance with legal obligations where applicable |
| Publishing factual public repository information and sourced use cases | Legitimate interests in informing users about public software projects and resources |
| Using aggregate, privacy-conscious analytics to improve the Service | Legitimate interests in understanding and improving performance, subject to applicable consent requirements and your applicable privacy signals |
| Complying with legal requests and resolving disputes | Compliance with legal obligations and, where appropriate, legitimate interests in establishing or defending legal claims |
When we rely on legitimate interests, we consider the necessity of the activity and the interests, rights, and reasonable expectations of affected individuals. Where consent is the applicable basis, you may withdraw it at any time without affecting processing that occurred before withdrawal.
6. Cookies and Browser Storage
Top 200 Repos uses limited storage mechanisms to support requested functionality.
6.1 Functional Cookies
| Cookie or Storage | Purpose | When Used | How to Control It |
|---|---|---|---|
gt200-locale | Remembers your language selection | When you select a language | Change the language or clear site cookies |
gt200-dashboard | Remembers your chosen dashboard configuration | Only when you save dashboard choices | Select Reset to default or clear site cookies |
| Authentication/session cookie | Maintains a signed-in session | Only when you use a sign-in feature | Sign out, or clear site cookies |
| Browser storage | Keeps device-only saves, notes, preferences, a last-visit marker, and relevant functional identifiers | When you use the related features | Remove items in the interface where available, or clear the site's browser storage |
Cookie lifetimes may depend on browser settings, session behavior, and the configuration of the relevant feature. Cookies and browser storage are not all the same technology, but both can remember information on your device.
6.2 Technologies We Do Not Use for Advertising Tracking
The Service does not use third-party behavioral advertising cookies, cross-site advertising identifiers, or third-party advertising tracking scripts. Our own aggregate analytics do not require analytics cookies or persistent visitor profiles.
A future introduction of optional analytics, advertising, or other non-essential tracking requiring consent would require corresponding changes to our practices and, where applicable, a consent mechanism before activation.
6.3 Your Controls
You can manage or block cookies through your browser settings, delete stored site data, change your language, reset saved dashboard preferences, and use browser privacy features. Blocking strictly functional cookies may interfere with sign-in or saved preferences. Clearing browser storage can permanently remove device-only notes, collections, and saved items that have not been exported or otherwise preserved.
For a more focused explanation of browser storage, visit https://top200repos.com/cookies.
7. Analytics and Privacy Signals
We use first-party, aggregate analytics to understand whether the Service is functioning well and which pages and features are useful. The measurements consist of daily totals by page or action. They are not designed to include raw IP addresses, analytics cookies, personal identifiers, or visitor-level browsing histories.
Aggregate analytics data is generally retained for approximately 13 months.
We do not count browsers that send a Global Privacy Control (GPC) or Do Not Track (DNT) signal in these analytics, consistent with our current site behavior. Browser support and signal transmission can vary, so you may also use browser privacy controls to restrict locally stored data.
We do not use analytics to make decisions that have legal or similarly significant effects on individual visitors, nor do we combine these aggregate counts with newsletter addresses to create advertising profiles.
8. Newsletter and Email Communications
If you subscribe to our Weekly Digest, we process the email address you provide, your language selection, and a record of when you consented. We use this information to send the requested updates and to administer the subscription.
The digest is optional. You can browse the Service without subscribing, and you can stop newsletter messages at any time using the unsubscribe link provided in a digest email. You may also contact us using the methods in Section 2.
We do not use tracking pixels in the weekly digest. We do not sell subscriber addresses or give sponsors access to our subscriber list for their own marketing.
After you unsubscribe, we stop sending the digest. We delete or de-identify subscription information when it is no longer required, while retaining a minimal record where necessary to demonstrate consent history, honor an unsubscribe request, or meet a legal obligation.
Operational replies to a request you send us, such as a response to a privacy inquiry, are different from optional newsletter communications.
9. Saved Items, Notes, Personalization, and Accounts
You can save repositories and use cases, organize collections, make notes, and adjust how information appears. The Service is designed so that ordinary saved items and notes are retained in the browser rather than being automatically sent to the server.
Your device may also remember browsing convenience information, including your last visit and preferred interface settings. These preferences do not alter the underlying public repository rankings for other users.
If an account-related feature is used, the Service may maintain an authentication session and associate eligible dashboard preferences with a one-way hash of an account identifier. This allows the relevant feature to operate without placing the raw identifier in the preference record. Signing in is not required for ordinary public browsing.
Because local storage is device- and browser-specific, clearing that storage may remove your saved materials. A request to delete information on our servers cannot recover or delete information that remains solely under your control in your own browser; you can clear that information yourself.
10. Votes, Reports, and Content Submissions
Voting and reporting tools may use a randomly generated device signal and hashed records to prevent repeated submissions, manipulated counts, or abuse. These controls are intended to protect community features, not track visitors across unrelated websites.
If you submit a use case, we review the source URL and description before deciding whether to publish an entry. You may provide a name or handle for attribution. If an entry is published, the source link and an attribution you voluntarily supplied may become publicly accessible and may be indexed by search engines.
Please submit only material you have the right to share, use public source links, and avoid including private information about third parties. We may reject, edit, remove, or investigate submissions or reports to protect accuracy, safety, and the rights of others.
You may request correction or removal of personal information in published content through the contact methods in Section 2. We will assess the request in light of applicable law, legitimate public-interest considerations, and the source of the information.
11. Third-Party Sources, Links, and Media
Top 200 Repos links to resources operated by third parties, including public code repositories, video hosts, community sites, documentation, and tool providers. These services determine their own privacy practices when you visit them.
GitHub and other public data sources. We may retrieve and display publicly available repository metadata and source-linked information. If you follow a link to GitHub or another source, that site's own privacy policy applies to your interactions there.
YouTube images and video links. Some video guides display thumbnails served from YouTube's image infrastructure, including i.ytimg.com. When your browser requests a thumbnail from that host, the provider can receive standard connection information, such as your IP address and browser request details. When you open a video on YouTube, YouTube may process additional information under its own policies. We do not characterize externally hosted thumbnails as data that stays entirely on our own servers.
Other external links. Links to public discussions, resources, sponsors, and related sites may send the destination service ordinary referral and connection information. Their use of cookies or other technology is not controlled by this Policy.
Useful third-party privacy information includes:
We are not responsible for the content or privacy practices of independently operated external websites.
12. Sponsorships and Commercial Links
Top 200 Repos may display clearly identified sponsorship placements. Sponsorships are kept separate from the editorial basis of repository rankings, star counts, use-case assessments, and other independent content.
Our sponsorship model does not rely on sponsor-provided tracking scripts, pop-ups, autoplay advertising, or the sale of visitors' personal information. Sponsored outbound links may be marked as sponsored, and the destination site may process the information ordinarily associated with a link visit.
We do not provide sponsors with personal newsletter subscriber lists, private notes, or individual browsing histories.
13. When Information May Be Shared
We may share or make information available only as reasonably needed for the following purposes:
- Infrastructure and service providers: Hosting, network security, application delivery, email delivery, and related technical services, to the extent required to operate the Service.
- Third-party content providers: Requests for public source material, externally hosted thumbnails, or resources that you choose to open, as described in Section 11.
- Public publication: Source links, public repository information, and approved submissions or attribution intentionally published on the Service.
- Legal and safety requirements: Compliance with valid legal obligations, lawful requests, or the protection of users, the public, our systems, and legal rights.
- Business or operational changes: A legitimate transfer or reorganization of the Service, subject to appropriate confidentiality, security, and applicable legal requirements.
Service providers processing information on our behalf are expected to handle it only for authorized purposes and with appropriate safeguards. We do not sell personal data or provide it to third parties for their independent targeted advertising campaigns.
14. International Processing and Transfers
The Service is accessible internationally. Our hosting infrastructure, public source providers, content delivery services, and email service providers may process data in different countries. A request for an externally hosted resource can also result in a direct connection between your browser and a provider outside your country.
Where an international transfer of personal information is subject to legal restrictions, we seek to use an appropriate lawful transfer mechanism and safeguards, such as an applicable adequacy decision, contractual protections, or another permitted basis. You may ask about the safeguards relevant to your information using the contact methods in Section 2.
Data protection laws differ by country. This does not remove any rights you have under laws that apply to the processing of your personal information.
15. Data Retention
We keep information only for as long as it is reasonably needed for the purpose for which it was processed, subject to applicable legal obligations, security needs, and dispute resolution requirements.
| Category | Retention Approach |
|---|---|
| Device-only saves, notes, collections, and preferences | Remain on your device until removed through available controls, browser cleanup, or browser/device lifecycle events |
| Language and dashboard cookies | Persist according to the feature and browser behavior; dashboard choices can be removed using Reset to default |
| Authentication/session information | Retained as needed for an active session and applicable security or account operations |
| Aggregate analytics | Approximately 13 months |
| Weekly digest subscription | While subscribed; afterward, only as long as needed to honor unsubscribe choices, document consent where necessary, or comply with law |
| Use-case submissions, reports, and associated review records | For as long as needed to review, maintain, correct, or defend decisions relating to the submitted or published content |
| Votes, hashed anti-abuse signals, and rate-limiting records | For the period reasonably required to preserve vote integrity, enforce limits, detect misuse, or resolve related issues |
| Contact messages and privacy requests | For as long as necessary to respond, keep an appropriate record of the request, and satisfy applicable legal requirements |
| Public repository metadata and historical rankings | While reasonably useful for current rankings, historical comparisons, source verification, and operation of the Service |
| Infrastructure and security logs | In accordance with operational security needs and applicable hosting-provider retention practices |
Where a specific fixed period is not stated, the retention decision depends on the nature of the information, its sensitivity, the purpose of processing, whether the information remains necessary, and applicable legal requirements. Records may be deleted, aggregated, or de-identified when they are no longer needed in identifiable form.
16. Security
We use reasonable technical and organizational safeguards appropriate to the nature of the Service and the information involved. Our approach includes minimizing unnecessary collection, limiting the use of identifying information in application records, maintaining access controls, and using security and anti-abuse measures.
No website, storage system, email service, or internet transmission can be guaranteed completely secure. You should avoid transmitting unnecessary sensitive information, keep your browser and devices updated, and protect any account credentials you use with external providers.
If we identify a personal-data incident that triggers a notification requirement under applicable law, we will follow the relevant legal notification obligations.
17. Your Privacy Rights
Depending on where you live and which law applies, you may have rights to:
- Access: Ask whether we process personal information about you and request a copy where legally required.
- Correction: Request correction of inaccurate information.
- Deletion: Ask us to erase information where the law provides that right.
- Restriction: Request limits on certain processing activities.
- Objection: Object to processing based on legitimate interests in circumstances provided by law.
- Portability: Request eligible information in a commonly used, machine-readable format where the legal conditions are met.
- Withdraw consent: Stop consent-based processing, including the newsletter, without affecting prior lawful processing.
- Complaint: Raise a concern with the relevant data protection or privacy regulator.
- Additional local-law rights: Exercise rights available under applicable national, regional, or state privacy legislation.
To exercise a right, email [email protected] or use our Contact Page. Describe your request and, when useful, the relevant page, submission, or account feature.
We may need reasonable information to verify that a request concerns you, particularly where disclosure or deletion could affect another person. We will not ask for more identification information than is reasonably needed. We respond within the time required by the applicable law and explain any lawful limitation or refusal.
You may also complain to a competent supervisory authority without first contacting us. If the GDPR or UK GDPR applies, this may include an authority in the country where you live, work, or believe a violation occurred.
Important distinction: We can review or delete information we control, but we cannot directly erase public repository information held independently by GitHub or another source. You may also need to approach the original source. Similarly, browser-only notes and saves must be cleared from your own device.
18. Choices About Tracking, Communications, and Public Content
You can exercise meaningful privacy choices without creating an account:
- Newsletter: Use the unsubscribe link in any digest email.
- Local saves and preferences: Use available in-app controls, reset the dashboard, or clear the site's cookies and local browser storage.
- Analytics: Use a browser that communicates GPC or DNT, which our current aggregate analytics respect.
- External media: Avoid opening externally hosted links or loading pages containing external thumbnails if you do not want your browser to connect to those providers.
- Public submission attribution: Omit the optional name or handle when submitting a use case, or request a review of an attribution already published.
- Privacy requests: Contact us through the two official methods stated in Section 2.
19. Children and Minors
The Service provides general information about open-source software, developer tools, and technology resources. It is not directed specifically at young children, and we do not knowingly seek to collect children's personal information for targeted advertising.
If you believe a child has provided personal information that should not be retained, please contact us. We will assess the request and take appropriate action in accordance with applicable law. Where a feature requires parental authorization under local law, that requirement must be satisfied before the relevant processing takes place.
20. Automated Rankings and Decision-Making
The Service automatically calculates and displays repository rankings, growth comparisons, and other technical summaries based on information obtained from public sources and our published presentation methods. These calculations concern software projects, not eligibility for employment, credit, insurance, healthcare, or other decisions that legally or similarly significantly affect individual visitors.
We do not use personal visitor profiles for automated decision-making that produces legal or similarly significant effects on them. A ranking, summary, or recommendation may change as source data is updated and should be treated as informational rather than as a guarantee of quality or fitness for a particular purpose.
21. Changes to This Privacy Policy
We may update this Privacy Policy when our features, data practices, service providers, or legal obligations change. The Last Updated date at the top will identify the latest revision.
When a change materially affects how personal information is handled, we will provide any additional notice or seek any new consent required by applicable law. The version published at https://top200repos.com/privacy is the current version for the Service once posted there.
22. Contact Us
For questions about this Privacy Policy, privacy rights, unsubscribe assistance, the handling of a submission, or a request concerning your personal information, contact Top 200 Repos using either of the following methods:
Contact Page: https://top200repos.com/contact
Email: [email protected]
We will review privacy-related requests and respond in accordance with applicable law.
Top 200 Repos
https://top200repos.com
Effective Date: November 11, 2026