Privacy Policy
Last updated November 13, 2026. This policy is a working draft, open to legal review; it describes what the software actually does.
Visitors
- We do not use advertising or third-party tracking cookies and load no third-party scripts.
- Anonymous page views and website click-outs are counted per listing per day (aggregate numbers only). To avoid double counting we keep a hashed IP-based counter for up to 30 minutes.
- Our servers keep technical access logs (IP address, URL, user agent) for security and troubleshooting, normally for no longer than 30 days.
Publishers and account holders
- Account data: email address, optional name, password hash (Argon2id), optional two-factor secret (encrypted), login time and IP.
- Your account email is private. It is never shown on listings. Only the public contact fields you choose to make public are displayed.
- Security records: we keep an audit log of important actions (logins, edits, ownership changes) for up to 24 months.
- Emails: we send transactional emails only (verification, password reset, listing status, security alerts, team invitations).
Your choices and rights
- Download your data from Account settings (JSON export).
- Delete your account at any time from Account settings. Your personal data is erased; listings you published remain as organization information and become unclaimed.
- For correction or removal of listing data, or any privacy question, use the privacy request form.
Processors and storage
The service is hosted on servers in the European Union (Hetzner, Germany/Finland). Email is delivered from our own mail server. Content may be cached by our CDN provider for performance.
Retention
Unused anonymous submission drafts are deleted after 7 days, expired tokens after 7 days, rate-limit counters after one hour, application logs after 30 days and audit logs after 24 months.