# Privacy Policy

> What indieSaaS collects, why, who we share it with, and how to delete your data.

Canonical: https://l.domainrating.app/privacy

## What we collect
- Account data from your sign-in provider (name, email, photo, username).
- Profile data you add (bio, X, GitHub and LinkedIn usernames).
- Listings you submit.
- Upvotes, stored with a one-way hash of your IP address and browser (no raw IPs).
- Payment status from the payment provider (never card details).
- Email delivery, open and click activity.

## Who we share it with
- Sign-in: Google, GitHub or X.
- Payments: Dodo Payments.
- Email delivery provider.
- AI auto-fill: Google Gemini reads your public website when you use auto-fill.
- Bot protection: Cloudflare Turnstile.

## Cookies
One cookie keeps you signed in, plus short-lived cookies during sign-in. No advertising or tracking cookies.

## Deleting your data
Delete your account from Account settings; everything is deleted after 90 days unless you sign in again. Payment records are kept for accounting without your name or email.

Contact: support@example.com