wealthior · marketbuild: 2026-05-17
wealthior::market

Privacy policy.

What we collect, why, and how to remove it. Short, honest, and free of dark patterns.

[01]who runs this site

Wealthior Marketplace (market.wealthior-group.ch) is operated by Wealthior Group, registered in Zürich, Switzerland. Contact: info@wealthior-group.ch.

[02]what we collect

We collect only what is technically necessary to operate the marketplace:

  • Aggregate analytics — page views and Web Vitals via Vercel Analytics and Vercel Speed Insights. No cookies, no fingerprinting, no cross-site tracking.
  • Install events— anonymous counters per plugin (view, copy-install, external click). We hash IP+User-Agent into a non-reversible token so the same visitor isn't counted twice in a short window. We do not store the raw IP.
  • GitHub OAuth session — only when you log in to access private plugins. We store your GitHub username and an encrypted access token to verify repo access. The token is never exposed to the browser.
  • Webhook payloads — when GitHub fires our sync webhook, we read the commit metadata to know which plugins changed. We do not store user data from those payloads.

[03]what we do NOT collect

  • No advertising cookies or third-party tracking pixels.
  • No email addresses unless you contact us directly.
  • No purchase or payment data — the marketplace is free.
  • No data about which plugins you install in your local Claude Code (that happens entirely on your machine).

[04]data processors

  • Vercel (USA / EU) — hosting and analytics. policy
  • Supabase (EU region) — database for plugin metadata and install counters. policy
  • GitHub (USA) — repository hosting and OAuth provider. policy

[05]your rights (GDPR · revDSG)

You can request access, correction, deletion or export of any personal data we hold about you by emailing info@wealthior-group.ch. We respond within 30 days. Since we collect almost no personal data, most requests resolve in minutes.

[06]data retention

  • Aggregate analytics: 30 days, then deleted automatically.
  • Install event counters: indefinitely, fully anonymized.
  • OAuth sessions: until you log out or 90 days idle.
  • Webhook logs: 7 days.

[07]changes to this policy

If we change this policy, the updated version is published here with the new date below. Material changes are also announced on the homepage for two weeks.