Skip to content

Privacy Policy

Last updated: March 2026

What We Collect

We use Plausible Analytics, a privacy-friendly analytics tool. Plausible does not use cookies and does not collect personal data. We see aggregate page views and referrer data — nothing that identifies you personally.

Email Subscribers

If you subscribe to our newsletter, we store your email address to send you updates about new AI tools and pricing changes. You can unsubscribe at any time via the link in every email. We never sell or share your email with third parties.

Affiliate Links

Some links on this site are affiliate links. When you click them, the destination site may use cookies to track the referral. This is standard practice and governed by the destination site's own privacy policy.

Cookies

We do not set any cookies. Our analytics (Plausible) is cookie-free. Affiliate destination sites may set their own cookies.

Bot Protection (Turnstile)

We use Cloudflare Turnstile on all forms (contact, newsletter signup, tool submission) to prevent automated spam. Turnstile is a privacy-preserving alternative to CAPTCHA — it does not use cookies, does not collect personal data, and works by analyzing browser signals. Learn more at cloudflare.com/products/turnstile.

Security Headers

We use Cloudflare's security infrastructure including HSTS, Content Security Policy, and rate limiting to protect your browsing experience. No personal data is collected through these security measures.

User Accounts

When you create an account via Google OAuth, Apple Sign In, or email/password, we store the following in Cloudflare D1 (edge database):

  • Profile data: email address, display name, avatar URL (from OAuth provider)
  • Activity data: favorites, collections, reviews you write
  • Authentication tokens: JWT session tokens (not stored server-side, issued per session)

You can delete your account and all associated data at any time from your Dashboard settings. We do not share account information with third parties.

For users with account balances or linked payment methods, we require two-factor authentication (Google Authenticator / TOTP) to protect account security.

User-Generated Content (Reviews)

When you submit a review, the following is stored: your display name, star rating, review text, and submission date. Reviews are publicly visible and associated with your account.

We apply anti-spam measures: reviews from accounts less than 7 days old with low ratings may be held for moderation. Reviews with 3 or more community reports are automatically hidden pending review.

You can edit or delete your own reviews at any time. If you delete your account, all your reviews are permanently deleted.

GDPR & Your Rights

If you are located in the European Economic Area (EEA), you have the right to:

  • Access, correct, or delete your personal data
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent at any time

To exercise these rights, contact us. We respond to all requests within 30 days.

CCPA — California Residents

If you are a California resident, you have the right to:

  • Know what personal data we collect and how it is used
  • Request deletion of your personal data
  • Opt out of the sale of personal data (we do not sell personal data)
  • Non-discrimination for exercising your rights

To exercise these rights, contact us.

Data Storage & Processing

Data is stored in Cloudflare D1 (edge database) and processed on Cloudflare's global network. Cloudflare is certified under the EU-U.S. Data Privacy Framework. For details, see Cloudflare's Privacy Policy.

Data Retention

  • User accounts: until you delete your account
  • Reviews: until you delete them or your account
  • Newsletter subscriptions: until you unsubscribe
  • Contact form messages: 12 months, then deleted
  • Tool submissions: retained indefinitely as part of our directory
  • Analytics (Plausible): aggregated, no personal data retained

Data Controller

The data controller for this Service is Coda Web3 Creative Ltd., a company registered in England and Wales.

Contact

Questions about this policy? Contact us.