Privacy & metrics

We record a listing impression when at least half a product row is visible, a product-page view when you open a product, and an intentional website click. Counts are deduplicated for each product, session, event type and UTC day. A website click is counted only after a product view in that session and day.

A signed, first-party cookie lasts 30 days and supports this deduplication. We do not use browser fingerprinting or third-party analytics. Session counts are estimates, not a count of unique people. Cookies are also used to keep you signed in.

While a public page is visible, it sends a visit signal at most once a minute and when you change pages. We count estimated visitor sessions, outbound clicks to currently public products, and products launched. Active now means a signal was received within the last two minutes. Collection pauses when the tab is hidden or offline.

The browser classifies the referring site as direct, X, search or other. We do not store the full referrer, browsing path, search query, IP address or location in these analytics records, or link them to your account. Raw visit records are kept for 35 UTC calendar days and cleared by daily maintenance. Public responses contain aggregate counts, not session identifiers.

Do Not Track and Global Privacy Control signals disable analytics collection. Essential sign-in cookies continue to work. Clearing cookies or using another browser changes the estimated session count. Known crawlers are excluded, but the numbers are not a guarantee of human traffic.

Makers can see aggregates for the last 7 or 30 UTC days for their own products. Click-through rate is website clicks divided by product-page views in the same period. When there are no product-page views, the rate is unavailable. Website clicks do not measure sales, signups or customers.

Drafts, pending edits, moderation reports, account details and maker analytics are not public listings. Approved product content becomes public only when its launch day begins. Reports are available to moderators.

If you sign in with Google or X, that service shares your email address and basic profile details, such as your name and picture, with Supabase Auth, which runs our sign-in, to create your account. We use the email to identify your account and don’t show those details on public pages. We never post to Google or X for you.

You can delete your account from your dashboard at any time. That immediately removes the account, everything it launched (pages, images, results and numbers), the votes it cast and its entries in our sign-in log. Some copies take longer to go:

• Public images can stay in browser and CDN caches for up to a day.
• Our image backup drops them at its next nightly run.
• Encrypted database backups keep everything for up to 14 days before they are deleted. If we ever had to restore one, an account deleted after it was taken could come back; tell us and we’ll delete it again.

Results already recorded for other launches stay as they were, unless a moderator later corrects that day.

When it is switched on, the email sign-up, sign-in and password-reset forms use Cloudflare Turnstile to tell people from bots. Cloudflare receives technical details from your browser for that check; we only receive a pass or fail.

Public product pages include valid vote counts and current or finalized positions. Vote actor identities are not shown publicly. Moderator corrections can change results if abuse is removed. Weekly highlights show the most-supported public launches from the current UTC week; they are not finalized weekly awards.