Privacy — what this site processes
Almost nothing. index.ocx.sh is a set of static files. There is no account, no form, no analytics, no cookie, and nothing on any page is loaded from another company's server. What remains is the request your browser makes to fetch each page, which the host processes — this notice exists to say so precisely.
Who is responsible
Michael Herwig — contact@michael-herwig.de. This is a private, non-commercial open-source project.
Server logs
This site is hosted on Cloudflare Pages. To deliver the site and defend it against abuse, Cloudflare processes the technical data every web request carries: your IP address, the time, the file requested, the referring page, and your browser's user-agent string.
| Question | Answer |
|---|---|
| purpose | Delivering the site and keeping it secure — abuse and attack defence |
| legal basis | Art. 6(1)(f) GDPR, legitimate interest in a working and secure site |
| collected by | Cloudflare, not by me — I have no access to individual request logs |
| retention | Determined by Cloudflare — see their privacy policy below |
Hosting, and the transfer to the US
Cloudflare, Inc. is based in the United States. Cloudflare has certified adherence to the EU–U.S. Data Privacy Framework and additionally relies on the European Commission's standard contractual clauses for transfers from the EU, UK and Switzerland. Details, including retention and Cloudflare's own contact points, are in the Cloudflare Privacy Policy.
No cookies, no tracking
This site sets no cookie and runs no analytics, tag manager, or any advertising or tracking script. Nothing is fetched from a third-party server while you read: the typefaces (IBM Plex) are bundled with the site itself, and package logos are stored in this index's own content store rather than hot-linked from a registry.
The site remembers display choices you make, in your browser's local storage: vitepress-theme-appearance (light/dark), ocx-catalog-view (cards/table) and ocx-catalog-sort (sort order). They stay on your device, are never transmitted anywhere, and hold no identifier. Clearing your browser's site data removes them.
Links to other sites
Pages here link out to GitHub, container registries and upstream project sites. Following such a link hands you to that operator, whose own privacy notice then applies. Nothing is sent to them until you click.
Your rights
Under the GDPR you may request access to your personal data (Art. 15), its rectification (Art. 16) or erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and you may object to processing based on legitimate interest (Art. 21). Write to the address above.
One honest limitation: the log data described here is held by Cloudflare, and I never see it. A request about those logs is one only Cloudflare can answer — I will point you at them rather than pretend otherwise.
You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR), in the member state of your residence, place of work, or of the alleged infringement.
Changes
This notice describes the site as it stands. If a page ever starts loading something from elsewhere, this page changes in the same commit.
Last updated 5 August 2026.