Privacy Policy
Last updated November 5, 2026
This policy explains what indieSaaS collects when you use the site, why we collect it, who we share it with, and the choices you have.
What we collect
- Account data from the sign-in provider you choose (Google, GitHub or X): your name, email address (X doesn't share one), profile photo and username.
- Profile data you add: bio and your X, GitHub and LinkedIn usernames.
- Listings you submit: product name, website, descriptions, logo, screenshots and blog questionnaire answers.
- Upvotes, stored with a one-way hash of your IP address and browser to prevent fraud. We don't store raw IP addresses with votes.
- Payment status from our payment provider (amount, currency, result). We never see or store card details.
- Email activity: whether our emails were delivered, opened or clicked, so we can fix delivery problems.
How we use it
- To run your account, show your listings and count votes fairly.
- To send emails about your account and listings (see Emails below).
- To detect spam, fake accounts and vote manipulation.
- To fill in listing details from your website when you ask us to (we send your public website content to an AI service for that).
Who we share it with
We don't sell your data. We use a small number of services to run the site:
- Sign-in: Google, GitHub and X (only the provider you choose).
- Payments: Dodo Payments processes paid launches.
- Email delivery: our email provider sends account and listing emails.
- AI auto-fill: Google Gemini reads your public website when you use auto-fill.
- Bot protection: Cloudflare Turnstile may check that you're human on sign-in.
Anything you publish on a listing or your maker profile is public.
Cookies
We use one cookie to keep you signed in and a few short-lived cookies during sign-in. We don't use advertising or tracking cookies.
Emails
We send emails about your account and listings. You can turn off launch updates, results, badge alerts and blog post emails in Account → Email preferences. Welcome emails, payment receipts, review decisions and account notices are always sent.
Keeping and deleting your data
- We keep your data while your account is active.
- You can delete your account in Account → Delete account. Everything is permanently deleted after 90 days. If you sign in during that time, the request is cancelled.
- Payment records are kept for accounting and tax, without your name or email.
Your rights
You can access, correct, export or delete your data. Most of it you can edit yourself in your dashboard; for anything else, email support@example.com.
Changes
If we change this policy in a meaningful way, we'll update the date above and let account holders know by email.