Privacy

What we collect

When you sign in. We use email magic links, Google, or GitHub to sign you in. From them we receive your email address, display name and avatar image. We never receive or store your password for either service.

When you use directory tools. We store saved tools, comparison lists and calculation settings, alert preferences, profile edits, enquiries, and replies. Product profiles and their changes are public. Your saved lists are private. Enquiries are visible to you, the relevant owner, and authorised administrators.

Historical payments. Previous advertising payments were handled by Stripe. New pixel purchases are closed. Card numbers never reach our servers and we cannot see them. We receive only a confirmation that a payment succeeded, and the amount.

When you visit. We record the page, the site that sent you, your browser, operating system and device type, and roughly where you are — the country and the nearest city your internet provider’s address block is registered to. That is the city, not you: everyone on the same provider in the same area resolves to the same point, and the coordinates we store are the centre of that city rather than anywhere you have been.

Your IP address is not stored. It is used at the moment of the visit to work out the country and city above, and to make an identifier by hashing it together with your browser string and a secret that is replaced every night. Once the secret rotates, yesterday’s identifier cannot be linked to today’s — by anyone, including us. That is what lets us count visitors without a cookie and without a way to follow you between days.

What is public

Anyone can read product descriptions, sources, pricing, screenshots, offers, and recorded profile changes. Owner reports show aggregate directory activity; they do not expose individual visitors or their browsing histories.

Your email address is not shown publicly anywhere on the directory.

Product logos

Product logos load from an owner-provided image URL when available. Otherwise we request the website favicon from Google’s favicon service. These image providers receive your IP address and the requested image or domain. Image requests omit the page referrer. If images fail, we show the product’s initials.

Who else processes your data

• Supabase — database, sign-in and image storage
• Stripe — payment processing
• Railway — application hosting
• Google and GitHub — sign-in, if you choose to use them

We do not sell your data, and we do not share it with advertisers or data brokers.

Cookies

Your browser also stores theme preferences and your temporary shortlist locally. We set one kind of cookie: the session cookie that keeps you signed in. There are no advertising or third-party tracking cookies on this site.

Keeping and deleting your data

Historical purchase records are retained after retiring the board. Saved tools and lists can be removed from your account. Public profile change history is retained for transparency; contact us if it contains personal information that should be removed.

You can ask us to delete your account and personal details at any time by writing to johnnyhashim@gmail.com. Where we are required to keep a payment record, we will keep the minimum needed and detach it from your account.

Contact

Questions about any of this go to johnnyhashim@gmail.com.