Template policy — confirm the data-processor list, legal bases and retention periods with counsel before launch.
1. What we collect
Account data (name, email, optional handle and avatar), startup listing data you submit, support and takeover activity, payment records (amount, status, provider references — never card numbers), notification preferences, and technical data such as IP address and user agent for security and rate limiting.
2. How we use it
To run the Service (showing the spotlight, counting support, processing takeovers), to prevent abuse (rate limits, one-account rules, moderation), to send transactional emails you can partly opt out of, and to comply with legal obligations such as bookkeeping.
3. What is public
Your startup listing, website preview and throne history are public. In activity feeds we show your handle or first name — never your email. Supporter counts and amounts are public; individual free supports show your first name or handle.
4. Processors
Stripe (payments), Resend (email), our hosting and database providers, and an optional screenshot service for website previews. Sign-in with Google or X shares your basic profile with us according to their consent screens.
5. Retention
Account data is kept while your account exists. Payment records are kept as long as required by tax law. When you delete your account we anonymise your profile and keep only the records we must retain.
6. Your rights
Depending on where you live you may access, correct, export or delete your data and object to certain processing. Use Settings or the Contact page. You may complain to your local data protection authority.
7. Cookies
We use strictly necessary cookies for sign-in sessions and security. We do not run advertising trackers.
Last updated September 14, 2026