# Website Privacy Policy

The privacy policy of the Bring Your LM website and marketplace: what they process about visitors and accounts, and what is public.

**Effective Date:** 8 Nov, 2026

This policy covers this website and any online service offered through it, including any
account-based service.

The Bring Your LM application is covered by a [separate policy](/privacy). The application does not
use this website or any service of ours as a backend, and nothing in this document applies to it.

## What may be processed

Serving a website and operating an online service requires processing technical request data —
including IP address, user agent, referrer, requested URL and timestamp — by us and by any hosting
platforms, content delivery networks, storage providers and other infrastructure we use. We may use
any such providers, in any jurisdiction, and may add, remove or change them at any time without
notice.

On the marketplace, an IP address is also used to count each download once per day and to limit
sign-in attempts and attempts to use links from our emails that are not valid. For this it is only
used in a keyed, truncated form that changes every day, and that form is kept only until the end of
the day it was made for.

If you create an account, we process the information you provide and the content you store, transmit
or publish through the service, in order to provide it. On the marketplace, an upload is kept with
its review: who decided it, when, and the reason given for a refusal; so is who withdrew, removed or
hid a listing or a release, and when. A suspended account is kept with who suspended it, when, and
the reason given. Every marketplace record also keeps which account last changed it, and when, and
every change made to the marketplace is logged: which account made it, when, which records it
changed, and any reason given. The log holds your username and the names of the sign-in providers
you connect, but not your name, email address or what you uploaded.

Some of what you do with an account is public by design. On the marketplace, your username is
public, and so is every star you give: anyone can see which accounts starred a listing, and which
listings an account starred, by username, with the date of each star.

If you sign in through a third-party provider, such as Google or GitHub, that provider processes the
sign-in under its own terms and policies, and shares with us the account identifier, name and email
address it holds for you, which we keep with your account; we keep the email address only if the
provider has verified it. On the marketplace, you can make an account without one, but publishing
needs an email address: one your provider verified, or one you type on your account page and
confirm through a link we email to it. We keep a typed address with the time you asked until you
confirm it or type another, and a link to confirm it works for a day.

We may use your account's email address to write to you about your account and what you publish
through it, such as the outcome of a review, and, if you moderate the marketplace, about uploads
waiting for review. We send these emails through an email delivery provider, which processes the
address and the email under its own terms and policies. An email names the listing and what
happened to it, and links the page that says the rest; it does not carry a moderator's reason or
what was uploaded. You can turn each kind of email off on your account page, or from a link in the
email itself, and we keep which kinds you turned off with your account.

We may process technical, account and aggregate usage data for operating, securing, measuring and
improving these services, and for any other lawful purpose connected with running them. This is not
an exhaustive list and is not intended as one.

## Cookies

The marketplace sets cookies only once you start signing in, and only to sign you in and keep you
signed in. They are not used to track you or for advertising, and no cookie is set while you only
read the website or download from it.

- `bylm_sign_in` carries a sign-in while you are at the provider, and lasts ten minutes.
- `bylm_sign_up` carries what the provider said about you while you choose a username, and lasts
  thirty minutes.
- `bylm_session` keeps you signed in, and lasts thirty days unless you sign out.
- `bylm_last_sign_in` remembers which provider you last signed in with, so the sign-in page can
  mark it, and lasts 400 days. Signing out does not remove it.

When the app opens the publish page with a file to publish, the page keeps that file in your
browser's session storage, for that tab alone, so it is still there after you sign in. It stays in
your browser: we receive the file only when you press Publish. It is cleared when you publish, pick
another file, or close the tab.

The theme switch in the header keeps a light or dark choice in your browser's local storage, under
`bylm-theme`, so pages open in that theme next time. It stays in your browser and is never sent to
us. Switching back to the system's theme removes it.

## What we do not do

We do not sell personal data, we do not run advertising, and we do not send marketing email.

## No guarantees

This website and any service offered through it are provided as is, without warranty. We make no
commitment as to retention periods, storage location, or the practices of the providers we use.

## Changes

We may change this policy at any time. Changes take effect when posted. You will not be notified.

## If you do not agree

Do not use this website or the service. The Bring Your LM application does not require either, and
remains fully usable without them.

## Contact Us

If you have any questions about this policy, please contact us at the address on [this page in a browser](/website-privacy.html).

---

[Bring Your LM](/) · [Docs](/docs/features) · [Marketplace](/marketplace)

[Articles](/articles) · [Releases](/releases) · [Bundle Format](/marketplace/bundle-format) · [Marketplace Terms](/terms) · [App Privacy](/privacy) · [Website Privacy](/website-privacy) · [Open Source](/open-source) · [llms.txt](/llms.txt)
