Two addresses, both read by us.

Sales, partnerships and Team plans[email protected]

The Team plan is sold through this address rather than a checkout, so start here if you need seats, an invoice, a purchase order or a signed agreement. It is also the address for Featured placements, press and anything about reusing our figures in a report or a product.

Billing, accounts and data requests[email protected]

Refunds, failed charges, cancellations, plan changes, a copy of your data or deletion of your account. The refund policy sets out the seven-day window and the privacy policy what we hold. Subscribers can also open the billing portal from the app to change a card or cancel without writing to anyone.

A number here looks wrong[email protected]

Send the extension id and what you expected, and we will check the readings behind it. Two things we cannot change: a registry’s own counter, which we report as published, and the fact that Open VSX counts downloads including updates rather than unique installs. If our derivation is at fault we will correct the stored series and say so.

Security reports[email protected]

Report a vulnerability to this address with enough detail to reproduce it, and please give us a reasonable window before disclosing. We do not run a bounty programme, we will confirm receipt, and we will tell you when it is fixed. Do not test against another account or run load against the site.

Take my extension’s page down[email protected]

Public pages describe listings the registries publish, and we keep them for that reason, but write to us if you believe a page is inaccurate or should not exist and we will look at it properly. Delisted extensions drop out of the public pages on the next crawl by themselves.

Building against our data instead? The MCP server and developer documentation need no account and no mail to us. About explains how the numbers are measured.