Last updated 2026-08-21
latest.sh has no accounts, no logins, and no newsletter. There is nothing to sign up for, so there is no name, email address, or password to collect. What follows is everything the site does touch.
Pages load Google Analytics 4, which sets cookies and records the usual aggregate signals: which pages are viewed, roughly where in the world the visitor is, and which site referred them. It is used to see which parts of the registry people actually use. Blocking it with an ad blocker, a tracker blocker, or a browser privacy setting does not affect anything on the site. Google’s handling of that data is covered by Google’s privacy policy.
Most pages carry one ad, served by Carbon (BuySellAds). Displaying it means your browser requests the ad from
carbonads.net and loads the creative from buysellads.net,
which necessarily discloses your IP address and user agent to them, as any third-party resource would. latest.sh does not
pass them anything about you, and does not receive anything identifying you back. Their practices are described in the
Carbon privacy policy.
You can vote for a tool to publish machine-readable pricing. What gets stored is a single number per tool — the count. To stop one person voting a hundred times, your IP address is held in the server’s memory for 24 hours and compared against new votes; it is never written to disk, never attached to the stored count, and disappears when the window passes or the server restarts.
The Stack Advisor sends the message you type, plus the recent turns of that conversation, to Anthropic’s API to generate a reply. latest.sh does not store the conversation — the history lives in your browser tab and is gone when you close it. Do not paste anything confidential into it. Anthropic’s handling is covered by their privacy policy. Your IP address is held in memory to rate-limit the feature, on the same terms as votes above.
The REST API and the MCP server need no key and no account, so there is nothing to link a request to a person. Requests are rate-limited per IP using an in-memory counter that resets every minute and is never persisted.
The site runs on Railway behind Cloudflare. Both keep standard operational logs — IP address, timestamp, path, status code — for the ordinary reasons: serving traffic, blocking abuse, and debugging failures. Those logs are held by those providers under their own retention policies, and are not used to build any profile of you.
No data about visitors is sold, rented, or shared beyond the services named above. There is no email list, no cross-site tracking pixel beyond the analytics described, no fingerprinting, and no attempt to identify individual visitors. The pricing data itself contains no personal information — it is public vendor pricing, and all of it is openly published.
If this changes, the date at the top changes with it. Questions go through the contact page.