Privacy Policy
How we collect, use and protect information when you visit ohdsh.com.
Effective date: 2026-09-10 · Version 1.0
On this page
1. Who we are
Oh! dsh ("we", "us", "the Site") is the website at ohdsh.com — an independent guide to the DeepSeek Harness ecosystem: curated plugin directory, guides, bilingual documentation, blog and the DSH Weekly newsletter. The Site is operated by the Oh! dsh team in the Hong Kong Special Administrative Region. For the purposes of this policy, we are the data user responsible for personal data collected through the Site.
This policy applies to information we collect through the Site and through emails we send you. It does not apply to third-party websites linked from the Site (for example GitHub, or the websites of plugin authors), which are governed by their own policies.
2. Information we collect
We collect as little as possible. The Site has no user accounts, no payments, and no comment system. The table below lists everything we collect in practice.
| What | Why | Basis | How long |
|---|---|---|---|
| Email address you submit to the DSH Weekly subscription form | To send the newsletter and related notices | Your consent | Until you unsubscribe; a suppression record is kept to honour opt-outs |
| Emails you send to [email protected] | To answer your request | Legitimate interest in responding | For as long as needed to resolve, then deleted |
| Aggregated usage statistics (pages viewed, referrer, device type) | To understand what content is useful | Legitimate interest | Kept in aggregate form; no personal identifiers |
| Server logs (IP address, user agent, timestamps) held by our hosting platform | Security, abuse prevention, operations | Legitimate interest / necessity | Short term (typically up to 30 days) |
Our analytics are provided by a self-hosted instance of Umami, which we operate ourselves. Umami does not use cookies, does not build user profiles, and does not perform cross-site tracking; it records aggregate page-view statistics. We do not collect IP addresses through Umami analytics and do not fingerprint visitors.
We do not sell personal data, do not serve targeted advertising based on personal data, and do not collect special categories of personal data.
3. Cookies and similar technologies
The Site currently uses no advertising or marketing cookies, and our analytics do not use cookies at all. The only cookies that may be set are strictly necessary ones used by the hosting platform for session management and security. Details are in our Cookie Policy. If we introduce non-essential cookies in the future — for example if advertising is enabled — we will update the Cookie Policy and obtain consent where required before setting them.
4. How we use information and legal bases
- Newsletter. We use your email address only to send DSH Weekly and occasional related announcements. You can unsubscribe at any time via the link in every email. Processing is based on your consent, which you may withdraw at any time.
- Correspondence. We use emails you send us to respond and to improve the Site. This processing relies on our legitimate interest, balanced against your rights.
- Analytics and operations. Aggregated statistics and server logs help us keep the Site secure and understand which content helps readers. Where the GDPR applies, the legal basis is Article 6(1)(f) (legitimate interests).
5. Third-party services and transfers
| Service | Role | What it handles |
|---|---|---|
| LiteStartup (litestartup.com) | Data processor | Website hosting, form storage, email delivery for the newsletter |
| Self-hosted Umami | First party (operated by us) | Cookieless aggregate analytics |
| Google Fonts (fonts.googleapis.com) | Third party (resource request) | Serves typefaces; Google may process your IP address when your browser loads the stylesheet |
Our processors may store or process data outside Hong Kong. Where data is transferred, we rely on the contractual and security safeguards those providers maintain, and — where the GDPR applies — on appropriate safeguards such as standard contractual clauses.
Clicking external links (for example to GitHub or a plugin's repository) transfers you to third-party sites governed by their own privacy policies; we are not responsible for their practices.
6. Retention and security
We keep personal data no longer than the purposes in section 2 require. Subscriber data is deleted after you unsubscribe (a minimal record is retained to prevent re-adding your address). We apply TLS encryption in transit, restrict access to personal data to people who need it, and require our processors to maintain appropriate technical and organisational measures. No method of transmission or storage is completely secure; we use reasonable safeguards appropriate to the limited data we hold.
7. Your rights
Under the Hong Kong Personal Data (Privacy) Ordinance (PDPO), you may request access to, and correction of, your personal data. Under the GDPR, where it applies, you may also request erasure, restriction of processing, data portability, object to processing based on legitimate interests, and withdraw consent at any time. To exercise any of these rights, email [email protected]; we will respond within the timeframes set by applicable law. You may also lodge a complaint with the Hong Kong Office of the Privacy Commissioner for Personal Data or, where the GDPR applies, with your local supervisory authority.
8. Children
The Site is a technical resource for developers and is not directed at children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
9. Changes and contact
We may update this policy from time to time. The "Effective date" at the top shows when it was last revised; material changes will be highlighted on this page and, where appropriate, notified to newsletter subscribers by email.
Questions about this policy: [email protected].