Privacy

website.show is operated by a private individual resident in Argentina, who is responsible for your personal data (the “controller”). Contact: hello@website.show.

This policy explains what we collect, why, who helps us process it, and how to have it deleted. The Terms cover everything else.

• Account. Your email address, name and profile picture from the Google account you sign in with. To sign you in and show you your listings.
• Listings. What you submit: the product name, tagline, description, category, tags, site address, icon and optional screenshot, all of which are published; and the email address for notifications, which is not. To publish the listing and tell you about it.
• Moderation records. Results of the automatic checks, badge checks and link checks, and moderators’ notes. To run the directory and explain its decisions.
• Payments. If you pay, we receive the amount, the payment status and reference, and your email address. Dodo Payments collects your card and billing details as the merchant of record, under its own privacy policy. We never see your card details.
• Email. Messages about your listings: in the queue, approved, not listed, payment received, link paused, archived. These are part of the service and are not marketing.
• Newsletter. Only if you tick the box: your email address and where you signed up. You can unsubscribe from any issue.
• Security. Your IP address, to limit how often forms can be used and stop abuse. Our host also keeps request logs, which include IP addresses, for a short time.
• Analytics. Pages you visit, the site that sent you, your device and browser, and your approximate location, collected by Google Analytics with cookies. To see which pages are useful and where visitors come from. In the EEA, the UK and Switzerland, only if you accept; elsewhere, until you turn it off (see Cookies).

The legal bases, where the law asks for one: performing our contract with you (account, listings, payments, service emails); your consent (newsletter, and analytics in the EEA, the UK and Switzerland); our legal obligations (payment records); and our legitimate interests in keeping the service secure, free of abuse and working, and in understanding how it is used (security, moderation records, link checks, and analytics elsewhere).

When you submit a listing, or ask for a draft, we send the listing text and a limited snapshot of your site’s public homepage (its title, description, headings, a text excerpt and button labels) to Anthropic, whose AI model checks the listing against the submission rules or drafts the text. Under Anthropic’s commercial terms, this data is not used to train its models. We also send your site address to Google Safe Browsing to check it is not flagged as unsafe.

These checks can refuse a submission automatically, and the reason is shown to you. If you think a refusal is wrong, email us and a person will review it. Nothing is published without a person approving it.

We use these providers, each only for its part of the service:

• Supabase: database, sign-in and file storage
• Vercel: hosting
• Resend: service emails
• Dodo Payments: payments, as merchant of record
• beehiiv: the newsletter, only if you subscribe
• Google: Analytics, and Safe Browsing checks
• Anthropic: automatic review and drafts
• Upstash: rate limiting

We do not sell personal data or share it with advertisers. We disclose it to others only when the law requires it, to protect our rights or anyone’s safety, or to someone who takes over website.show, who would then be bound by this policy.

These providers are based in the United States and other countries, so your data may be processed outside the country you live in. We rely on the safeguards they offer for international transfers, such as standard contractual clauses.

Published listings are public by design, and we allow search engines and AI crawlers to read public pages. Once a listing is removed, we delete our copy, but we cannot recall copies that search engines, archives or AI systems have already made.

• Sign-in cookies, set when you sign in, keep you signed in. The service cannot work without them.
• Your cookie choice (ws_consent) remembers whether you accepted or declined analytics, for six months.
• Google Analytics cookies (_ga, _ga_*) tell visits apart. They last up to two years.

If you are in the EEA, the UK or Switzerland, Google Analytics does not load at all until you accept it. Elsewhere, it loads by default. Wherever you are, “Cookie settings” at the bottom of every page lets you change your choice; declining removes the analytics cookies already set.

We use no advertising cookies. You can also block or delete cookies in your browser, or opt out of Google Analytics on every site with Google’s opt-out add-on.

• Account and listings: until you ask us to delete them, apart from the records below.
• Payment records: as long as tax and accounting law requires.
• Rate-limit counters: at most one hour.
• Host request logs: a short period set by the host.
• Analytics data: at most 14 months.
• Your cookie choice: six months, then we ask again.
• Newsletter: until you unsubscribe.
• Backups: overwritten on a rolling basis within a limited period.

You can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and withdraw consent you gave, such as for the newsletter. Email hello@website.show from the address you use with us. We reply within 30 days. We may need to keep some data, such as payment records, where the law requires it.

If you are unhappy with how we handle your data, you can complain to the data protection authority where you live. In Argentina, that is the Agencia de Acceso a la Información Pública (AAIP).

El titular de los datos personales tiene la facultad de ejercer el derecho de acceso a los mismos en forma gratuita a intervalos no inferiores a seis meses, salvo que se acredite un interés legítimo al efecto conforme lo establecido en el artículo 14, inciso 3 de la Ley Nº 25.326. La AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley Nº 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.

Data travels over encrypted connections, access to it is limited to what running the service needs, and our providers maintain their own security programmes. No system is completely secure, so we cannot guarantee absolute security.

The service is not meant for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.

We will post any change here and update the date above. If a change materially affects how we use data we already hold, we will also email account holders before it takes effect.

hello@website.show