$ PRIVACY POLICY

$ THE SHORT VERSION

• Browsing the index needs no account, and we don't use analytics, ads or tracking cookies.
• If you sign in, we store your email address so you can manage your store listings.
• We never sell your data or use your email for marketing.
• You can download or delete your account at any time from your dashboard.

$ WHAT WE COLLECT

Visitors. Browsing the site doesn't create an account, and we don't set any cookies until you sign in. Like any website, our hosting provider processes technical request data (such as your IP address, browser and the page you asked for) to serve pages and protect the site from abuse. See "Logs and security" below.

Store owners who sign in. When you sign in or submit a store, we store:

• Your email address, when your account was created and when you last signed in.
• Which listings you manage, and how your ownership was confirmed (email domain, approved claim, or added by a maintainer).
• What you submit: new listings, edits, and the note you write when claiming a listing.
• A history of changes to listings, so edits can be reviewed and undone.
• A session so you stay signed in, stored only as a one-way hash.

Store listings (name, description, website, country, tags, social links and logo) are business information that is shown publicly on the index. Please don't put personal information in a listing that you don't want to be public.

$ HOW WE USE IT

• To send you one-time sign-in links and emails about your submissions (approved, not approved, or an edit that was reverted). We don't send newsletters or marketing.
• To check whether you own a listing, by comparing your email's domain with the store's website.
• To let maintainers review new listings, ownership claims and edits.
• To keep the site secure: rate limits on sign-in and bot protection.

Where the GDPR applies, our legal basis is our legitimate interest in running an accurate, abuse-free directory, and providing the listing management you ask for when you sign in.

$ WHO SEES IT

• Maintainers. When you submit a store, claim a listing or edit a live listing, the details and your email address are posted to a private moderation channel on Discord that only maintainers can read.
• Cloudflare hosts the site and database, sends our emails, and runs Turnstile, the bot check on the sign-in form.
• Discord hosts the moderation channel described above.

We don't sell or rent personal data, and we don't share it with anyone else unless the law requires it. These providers may process data outside your country, including in the United States.

$ COOKIES

We set a single cookie, fa_session, only after you sign in. It keeps you signed in for up to 30 days and is removed when you sign out. Turnstile may use its own strictly necessary storage to tell people from bots. There are no analytics or advertising cookies.

$ HOW LONG WE KEEP IT

• Sign-in links expire after 15 minutes and are deleted within a day.
• Sessions expire after 30 days, or when you sign out.
• Your account is kept until you delete it or ask us to.
• Server logs are kept by Cloudflare for up to 7 days.

$ LOGS AND SECURITY

Our host keeps short-lived request logs so we can fix errors and spot abuse. Your IP address is used to rate limit sign-in attempts and is passed to Turnstile to check for bots. Sign-in links and sessions are stored only as one-way hashes, and the admin area is protected by Cloudflare Access.

$ YOUR CHOICES AND RIGHTS

From your dashboard you can edit or hide your listings, download a copy of your data, and delete your account. Deleting your account removes your email address, your sessions and your ownership of listings, and removes your email from past moderation messages. The store listings themselves stay on the index; ask us if you'd like a listing removed.

Depending on where you live, you may also have the right to access, correct, delete or export your data, to object to how we use it, and to complain to your local data protection authority. To make a request, contact a direct message to SUDO on Bluesky.

$ CHILDREN

Store owner accounts are meant for adults running a business. Some listed stores sell adult products, which are hidden by default. Don't create an account if you're under 16.

$ CHANGES AND CONTACT

If we change this policy, we'll update the date at the top of this page. Questions? Contact a direct message to SUDO on Bluesky. See also our Terms of Use.