Privacy policy

Account data: email address, username, optional display name, bio, and avatar URL. If you set a password we store only a salted scrypt hash — never the password itself.

Activity: your listings, upvotes, reviews, questions, answers, forum threads and comments, and submission drafts. Public contributions are shown with your username.

Technical: IP addresses on sign-in sessions and form submissions (spam prevention and rate limiting), and aggregate per-listing counters (views, clicks, badge impressions). We run no third-party analytics or advertising scripts.

Operate the directory, send the emails you asked for (sign-in links, notifications you can switch off per type, the weekly digest you opt into), prevent abuse, and compute the public metrics the site exists for. We do not sell or share personal data with advertisers.

Data lives on our own server (EU-hosted Postgres). Transactional email is delivered by Resend. Payments, when enabled, are processed by Stripe — card details never touch our servers. Cloudflare provides DNS, TLS, and bot protection.

Access & export: request a full export of your data from support or your account settings.

Deletion: Delete your account any time. Your email, name, and bio are removed immediately; reviews and forum posts are reattributed to an anonymous “deleted user” so conversations stay readable; listing ownership is released.

Email: every notification type has its own toggle in settings; every newsletter carries a one-click unsubscribe.

Sessions expire after 30 days. Sign-in links expire in 30 minutes and work once. Nightly database backups are rotated after 14 days. Questions or requests: hello@thepulselist.com.