Privacy Policy

Last updated: 12 October 2026.

This policy explains how FISH HWB / Ded Zed handles personal information across this website and public projects published under the FISH HWB or Ded Zed names, including software, repositories, documentation, OAuth return pages, VRChat-related project pages and support channels. If a project publishes a more specific privacy notice, that notice takes priority for that project.

Who is responsible

The project operator is FISH HWB / Ded Zed. Privacy questions can be raised through the relevant public project repository or the contact route published with the project. If a registered company becomes the legal operator of a service, its full legal identity and required company details will be published with that service and this notice will be updated.

Information that may be processed

Depending on what you use, information may include information you deliberately submit in a support request, issue, contribution or form; public profile information supplied by a platform you choose to use; technical information processed by hosting or embedded-service providers; OAuth or authorisation information needed to connect a service; and public metadata retrieved from services such as GitHub or VRChat for project listings.

This website

The FISH HWB website is hosted on GitHub Pages. FISH HWB does not run first-party behavioural advertising or first-party analytics on the site. Hosting providers and embedded services may still receive normal connection information such as IP address, browser information and request data, and may set or read their own cookies or storage under their own policies.

OAuth and connected platforms

Some projects can connect to third-party services at your request. OAuth callback pages may read a code or result from the browser URL so the relevant application can complete the connection. FISH HWB does not use those callbacks as a general-purpose tracking system. Connected applications may then exchange data with the platform only as needed for the feature you requested.

Why information is used

Information is used to provide requested project features, operate and secure projects, respond to support, maintain public project records, diagnose faults, prevent abuse, meet legal obligations and improve project reliability. Where UK or European data-protection law applies, the legal basis will normally be performance of a requested service or steps before it, legitimate interests in operating and securing the project, consent where a feature is optional and consent is appropriate, or compliance with a legal obligation.

Public contributions and friendship registry

GitHub issues, pull requests, discussions and similar public contributions are public by design and may include your account name, profile and submission history. The hidden Terms of Friendship joke page, if used, records an acceptance through a public GitHub issue so the signed name and acceptance date can appear in its public registry. Do not submit information there that you do not want to be public.

Sharing

Information is shared only as needed with infrastructure and platform providers used to deliver a feature, such as GitHub, Twitch, YouTube, Spotify, Discord, TikTok, VRChat or other services a project explicitly connects to; with maintainers or collaborators who need it to support a project; or where disclosure is required by law. FISH HWB does not sell personal information.

International transfers

Some service providers operate internationally. Where data-protection law requires safeguards for an international transfer, the relevant provider and operator rely on the transfer mechanism applicable to that service, such as adequacy arrangements or approved contractual safeguards.

Retention

Information is kept only for as long as reasonably needed for the purpose for which it was collected, security, support, record-keeping or legal obligations. Public GitHub contributions may remain in repository history. Hosting logs are retained according to the hosting provider's policies. Credentials or tokens stored locally by a desktop project remain under the operator's control unless a project-specific notice says otherwise.

Your rights

Where UK GDPR, EU GDPR or similar law applies, you may have rights to access, correct, erase or restrict personal information, object to certain processing, receive portable data, and withdraw consent where processing is based on consent. Some rights have legal limits, including where data is needed for security, legal claims or public repository integrity. To exercise a right, use the relevant project's published contact route. UK users may also complain to the Information Commissioner's Office (ICO).

Security

Reasonable technical and organisational measures are used for information under FISH HWB's control, but no internet service or software can be guaranteed completely secure. Keep platform credentials private and report suspected security issues through the published security or project contact route.

Children

FISH HWB projects are not intended to collect personal information from children through a dedicated child account system. Third-party services have their own age requirements and parental-consent rules, which users must follow.

Changes

This notice may change when projects, providers or legal requirements change. The date above shows the latest revision. Material project-specific changes may also be announced in the relevant repository or release notes.