Legal & Privacy

Privacy
Notice

Codex Marketplace is built to collect as little user data as practical. We use GitHub for authentication and keep only the operational records needed to run submissions, review, voting, installs, and the catalog.

Short Version

  • We use GitHub OAuth for sign-in.
  • We do not sell personal data.
  • We do not share personal data with advertisers or data brokers.
  • We do not use marketplace activity for ad targeting.
  • You can revoke GitHub OAuth access from GitHub at any time.

GitHub authentication

Sign-in is handled through GitHub OAuth. GitHub shows the permissions requested during authorization, and you can revoke access from your GitHub account settings at any time.

Marketplace operations

If you submit, approve, vote on, or install an artifact, the marketplace keeps the operational records needed to show that activity, prevent duplicate submissions, run security review, and maintain the public catalog.

Public repository review

Submitted artifacts are reviewed from GitHub source links. We store submission metadata and scanner findings, but we do not use submitted repository contents for advertising, resale, or unrelated profiling.

No ad data business

We do not sell personal data, rent user lists, share personal data with advertisers, or use marketplace data for cross-site behavioral advertising.

What We Keep

The marketplace may store your GitHub account identifier, GitHub username, session records, OAuth token metadata required for GitHub authorization, submitted repository targets, review decisions, scanner results, votes, and install counts. These records exist to operate the marketplace and protect users from unsafe submissions.

We do not ask for payment information, and we do not intentionally collect sensitive personal information. Please do not submit private, confidential, or secret material through public repository submissions.

Service Providers

We use infrastructure providers only as needed to host the marketplace, store the application database, and authenticate through GitHub. Those providers process data for the service; they are not given marketplace data for advertising or resale.

Deletion & Contact

If you want your marketplace submission or account-related operational records removed where possible, contact the maintainer through X @LLMJunky. Some public catalog, security, audit, or abuse-prevention records may need to be retained when required to keep the marketplace safe or comply with legal obligations.

Last updated: April 23, 2026