Paraply Ventures AS, a company based in Norway, operates the private npm registry service under the business name PrivateNPM.com (the "Service"). The company is the contact for this Privacy Policy. This policy explains what personal data we collect, why we use it, and what you can do about it. It applies to visitors and account holders. Contact us at [email protected] about privacy requests.
What we collect
- Account data: your email address, name, time zone and display preferences, password hash, passkeys, and linked identity providers. Passwords are stored as Argon2id hashes, not plaintext.
- Organization and registry data: the organizations you belong to, your role and invitations, and the packages, files, registry settings and access keys your organization stores. Key secrets are stored in protected form so they can authenticate later.
- Usage and security data: sign-ins, browser sessions, IP address and user agent, audit records, registry usage and technical logs used to run and protect the Service.
- Billing data: the plan and subscription status and, when Stripe billing is enabled, Stripe customer and subscription identifiers and invoice information. Payment card details are entered with Stripe; we do not store full card numbers.
- Communication data: account and notification emails, delivery status, support requests, and any information you send us when asking for help.
- Optional measurement data: unless you opt out, information about site visits and whether an ad led to a completed signup or billing milestone. This may include a browser identifier, an advertising click identifier and, when your organization adds a card or makes its first payment, a one-way SHA-256 hash of the email address you signed up with, which Google uses only to match that conversion to an ad interaction. We never send the email address itself, package contents, access keys, passwords, or email verification links to advertising services.
Operational logs and error monitoring may be used to diagnose problems.
With analytics enabled, we also measure which public use-case path a visitor chooses, clicks on sign-up links and links to other sites (their domain only), clicks to the external demo booking page, started and completed signups, started and completed checkouts (with the chosen plan and its list price), whether the new organization publishes a package version, and page load performance. Umami receives page paths with campaign labels (UTM parameters) and whether an ad click led to the visit, but never the ad click identifier or other parts of the address such as email or invitation links. On signed-in pages it also receives the organization's plan and whether it is on a trial. Your browser keeps the first publishing-workflow guide you visited for a 30-day measurement window. On a signed-in visit with analytics enabled, we also keep encrypted browser context (network address, browser user agent and Umami session token) for up to 30 days after your last consented visit, so a first package published from the CLI can reach the same analytics session without another browser visit. Turning analytics off deletes this server context for your current organization. Umami receives the milestone name and, when available, the use-case choice, page path or guide path, without organization identifiers, package names or contents, or access keys.
On our public pages and the sign-up form, analytics also records how visitors scroll, click and move through the page, to produce heatmaps and session replays. Form fields are masked, so what you type is not recorded, and signed-in pages, which can show access keys, are never recorded. Turning analytics off stops this measurement and clears the browser record. Expired records are cleared on your next visit.
Why we use it
- To provide the Service and perform our agreement with you: sign you in, host packages, control registry access, process subscriptions, send necessary account messages, and answer support requests.
- To protect the Service and our users under our legitimate interests: prevent abuse, throttle sign-in attempts, investigate failures and keep security and audit records.
- To meet legal obligations, such as accounting and responding to lawful requests.
- Unless you opt out, to understand site use and measure whether advertising leads to signups and customers. You can change that choice at any time through Privacy choices on the site.
You can change notification email preferences in your account. We use those choices to decide which optional messages to send.
We send account email (verification, password reset, security notices) because the Service cannot work without it. Notification email is optional: every message carries an unsubscribe link and you can choose channels per notification type under your account's notification settings.
Who sees your data
- Admins of an organization you belong to see your name, email, role and the audit trail of that organization.
- Providers for hosting, database, object storage, DNS, email delivery, error monitoring and billing process data needed for their services. Our trust center names these providers and the role each plays. When Stripe billing is enabled, Stripe handles payment card entry and billing. Some providers may process data outside your country; contact us for details relevant to your organization.
- If you choose to book a demo, Cal.com handles the booking page and the details you submit there under its own privacy terms.
- Unless you opt out of optional measurement, Umami processes analytics data and Google processes advertising measurement data under their respective services. Their processing may involve other countries.
- We do not sell personal data for money. Advertising measurement shares an advertising click identifier and, for billing milestones, a hash of your signup email with Google so it can measure which ads lead to customers. Some US state laws treat this as "sharing" personal data or processing it for targeted advertising; you can opt out as described under Your privacy choices.
How long we keep it
- Account data stays while your account exists. You can delete your account from your profile; organizations where you are the only member are deleted with it.
- Organization and registry data stays while the organization exists. Admins can configure retention for audit logs, notifications, event history, and expired or revoked share links. An unpaid trial organization is scheduled for deletion after its trial ends; a completed checkout before then keeps it active.
- Deleting an account or organization removes its active records and starts background cleanup of related files and data. Backups and records required for accounting, security or legal claims may remain for their applicable retention periods.
- Sessions and temporary sign-in tokens expire and are removed automatically. Email delivery logs, webhook records and exhausted background jobs have separate operational retention periods.
- Your optional measurement choice is kept in your browser until you change it or clear browser storage. An advertising click identifier or email hash linked to a signup expires from our active attribution records within 90 days and is removed once the conversion has been sent, and withdrawing advertising measurement removes unsent attribution for your current organization. Measurement providers keep data according to their applicable settings and policies.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to some uses of it. You can export your own account data and request account deletion from your profile. For other requests, email [email protected]. If you are in a jurisdiction with a data protection authority, you may also lodge a complaint with that authority.
Your privacy choices
Use Your Privacy Choices in the site footer to turn analytics or advertising measurement on or off at any time. Turning advertising measurement off also removes advertising attribution we have not yet sent for your current organization.
- If you visit from the European Economic Area, the United Kingdom or Switzerland, optional measurement stays off until you accept it; accepting the Terms of Service does not count as that consent.
- Elsewhere, optional measurement is on by default and you can opt out.
- We honor the Global Privacy Control signal: when your browser sends it, advertising measurement is off unless you turn it on yourself in the privacy choices.
Cookies
The Service uses necessary cookies for sign-in sessions and short-lived security or identity-provider flows. Optional analytics and advertising measurement run as described under Your privacy choices. Your choice is saved in browser storage. Advertising measurement may then use cookies or similar identifiers to connect an ad visit to a signup or billing milestone.
Changes to this policy
We may update this policy. Each version carries an effective date, and material changes are announced in the Service.
Contact
Contact PrivateNPM.com at [email protected] with privacy questions or requests.