In short: HubGet doesn't send any information about you or your computer. It uses the network only for the features described below – each server sees the usual request details (IP address, time, program version). Sign-in is optional; without it everything works except ratings and sync.
Without signing in
- The app catalog (catalog.json) is downloaded from the project website. It contains nothing about you – it's the same for everyone.
- App icons and screenshots load from the addresses listed in the catalog (publisher websites, GitHub, jsDelivr, Chocolatey, Wikimedia, Steam) and are cached on your computer. HubGet doesn't look up website favicons at runtime – services such as Google don't learn which apps you browse.
- Package managers (WinGet, Chocolatey, Scoop, npm, pip, Cargo, vcpkg, .NET, PowerShell Gallery) search, install and update through their own servers under their own policies. HubGet only passes on what you search for or install.
- GitHub stars in app details: a request to api.github.com with the app's repository name.
- HubGet updates: a check of latest.json on GitHub Releases. Turn off automatic checks in Settings → General.
- Links (app website, support, GitHub) open in your browser.
When signed in (optional)
- Sign-in with GitHub or Google happens in your browser – HubGet never sees your password. It receives your name, email and profile picture from the provider. The session is stored encrypted on your computer (Windows DPAPI).
- Star ratings are shown only as a summary (average and count), without names.
- Reviews are public under your account name – HubGet shows this while you write. You can edit or delete your review at any time.
- Screenshots you add to an app are downscaled by HubGet before upload and saved as WebP without metadata (EXIF, location). Others see them under your account name once a moderator approves them; until then only you see them. You can delete a screenshot at any time.
- Sync stores your favorites, package bundle, appearance and language preferences and notification preferences in your account. Turn off individual areas or sync entirely in Settings → General → Sync, where you can also delete the data from your account. Custom install commands, permissions and the automatic update schedule never go to the account.
- Account data is stored in a Supabase database and only its owner can see it. Deleting your account deletes your ratings, reviews, screenshots and synced data too. Encrypted database backups are kept for at most 90 days, so deleted data disappears from them within 90 days at the latest.
For developers: publishing an app
The WinGet publishing wizard downloads the installer from the address you enter (only to read its details – it never runs it). Submitting to the microsoft/winget-pkgs repository happens from your GitHub account; the access token stays in memory only while the wizard is open.
What stays on your computer
Settings, the catalog and icon cache, operation history and logs live only on your computer (the app folder in %LOCALAPPDATA% and the window storage). HubGet doesn't send them anywhere – you send a log for a bug report yourself.
Contact
Send privacy questions to the project email or on GitHub. See also the Code signing policy.