pypi
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
PyPI collects account, IP, and billing data, uses vendors and ads, and uploaders grant a broad license to packages.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
They collect email, display name, IP address, browser info, organization details, and billing data.
Read the exact line
Privacy policy
“PSF may collect the following information from users of PyPI: Email addresses Display names IP addresses HTTP User-Agent Company, firm, organization, agency, or other entity information Billing and payment information”
Training
They use it to run PyPI, process payments, send relevant info, and feed a public BigQuery dataset.
Read the exact line
Privacy policy
“To provide you with information about activites relevant to you on PyPI To administer and improve the PyPI website and services To process payments To provide the PyPI BigQuery Public Dataset”
Sharing
Many vendors (AWS, Fastly, Stripe, ads, and more) may store or process your information.
Read the exact line
Privacy policy
“The PSF uses some third party services to assist with operating online services supporting PyPI.”
Kept
The documents do not say how long they keep your data or when it is deleted.
Read the exact line
Privacy policy
“This privacy notice describes what personal information the Python Software Foundation (“PSF”) collects from user of the Python Package Index ("PyPI"), when and how we share that information, and why.”
Controls
The documents do not describe in-app deletion, training toggles, or other privacy switches.
Read the exact line
Privacy policy
“This notice is an addendum to the PSF Privacy Notice, which also applies to users of PyPI.”
Fine print
Uploading packages grants a worldwide license to copy them; the listed terms page is marked superseded.
Read the exact line
Terms of service
“If I upload Content other than under an Included License, then I grant the PSF and all other users of the web site an , worldwide, , nonexclusive license to reproduce, distribute, transmit, display, perform, and publish the Content, including in digital form.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Read the main PSF Privacy Notice this page adds to
Referenced as the PSF Privacy Notice that also applies to PyPI users
Read the current PyPI Terms of Service
Note on the terms page: superseded February 25, 2025
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If your package is not already under a free license they can use as-is, you give PyPI and every user a lasting right to copy and share that upload.
Read the exact line
Terms of service
“If I upload Content other than under an Included License, then I grant the PSF and all other users of the web site an , worldwide, , nonexclusive license to reproduce, distribute, transmit, display, perform, and publish the Content, including in digital form.”
For example, a package you upload can be mirrored and redistributed without asking you again.
Anything you upload is treated as public, not secret.
Read the exact line
Terms of service
“Any Content uploaded to PyPI is provided on a non-confidential basis, and is not a trade secret.”
For example, do not upload private company code expecting it to stay confidential.
A third-party ad company may process some of your personal information to show ads.
Read the exact line
Privacy policy
“EthicalAds to serve advertising on pypi.org. Some personal information may be processed on their servers.”
For example, visiting package pages can send data to EthicalAds.
If you pay, Stripe keeps your billing details on its servers.
Read the exact line
Privacy policy
“Stripe to process payments. Your billing information is stored on their servers and we process your payments using their services.”
For example, a paid organization account’s card data sits with Stripe, not only with PyPI.
Crash and error logs that may include personal data can be stored at Sentry.
Read the exact line
Privacy policy
“Sentry to aggregate error information from the PyPI website and services. Some personal information may be stored on their servers.”
For example, an error report might include your IP or account details on Sentry’s systems.
Some usage-related data is used to run a public dataset.
Read the exact line
Privacy policy
“To provide the PyPI BigQuery Public Dataset”
For example, download-style request data can end up in a public BigQuery set (they say no personal information for that Google Cloud path).
Site stats are meant to be and , not per-person tracking.
Read the exact line
Privacy policy
“We self-host Plausible Community Edition to collect some usage data for statistical purposes.”
For example, they look at popular pages and countries, not a named profile of you.
Password-breach checks are designed so they do not send your personal data to that service.
Read the exact line
Privacy policy
“Have I Been Pwned to check whether a password appears in known data breaches. No personal information is sent to their servers.”
For example, they can warn if a password is known-leaked without sending your email to HIBP.
This upload terms page is old; a newer Terms of Service replaced it.
Read the exact line
Terms of service
“Superseded by PyPI Terms of Service: February 25, 2025”
For example, the license and export rules here may not be the current full contract.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
How we got here · grade F · score 32/100 · 14 of 15 policy answers backed by a verified quote · 9 not stated
What does the app collect beyond what it needs to work?
They collect account details plus IP address, User-Agent, organization info, and billing, not just the package files you upload.
Does it record your voice, face or body, and what happens to that?
The documents do not describe collecting voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
EthicalAds serves ads on pypi.org and may process some personal information on its servers.
Do they sell or share your data, and can you opt out?
They list many service providers (hosting, payments, errors, ads, support) that may store or process personal information; they do not say they sell data.
What rights do they take over what you type and what the AI makes?
For uploads without an included royalty-free license, you grant an irrevocable worldwide license to reproduce and publish the content as uploaded.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy notice is dated August 26, 2026, but it does not explain how they will notify you of changes. The terms page is marked superseded.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 724 words at a college level (Flesch reading ease 45.2); the terms are 453 words at a college level.
