Publish only reviewed project descriptions and explicitly approved screenshots. Never copy an application folder, Git history, private README, credentials, personal dataset, biometric data, reports, debug logs, APKs or administrator interface into this showcase.

Security findings and personal data must not be posted in public comments or pull requests. Contact the owner through an independently verified private channel; request a contact method without disclosing details if needed.

Source privacy is an access boundary, not a security certification. It does not remove existing public copies or override third-party licenses. Exposed credentials require revocation or rotation, not merely a visibility change.