Privacy

What the site collects

The site sets no cookies, shows no advertising, and has no accounts.

It does use Umami for page analytics. Umami is cookieless: it records the page you are on, the page that sent you here, your screen size, your browser language, and a country derived from your IP address. It does not store your IP address and does not build a profile that follows you between sites. Data is processed by Umami Cloud on our behalf.

To opt out, turn on your browser's Do Not Track setting, or use any content blocker. Umami is on every major blocklist and the site works identically without it.

Your theme choice of light or dark is stored in your own browser's local storage. It never leaves your device.

Outbound links

A link to a listed tool goes through /go/ on this site before it reaches the tool. That step records which listing was clicked and which site it led to, and adds campaign parameters (utm_source, utm_medium, utm_campaign) so the destination can see that the traffic came from here.

The click is also counted in the analytics described above: which listing was clicked and which site it led to, nothing more.

Both records describe the link, not you. No IP address, no browser fingerprint, and no identifier that could connect two clicks to the same person.

What the host records

The site is served from Amazon CloudFront, which writes standard access logs: the requested URL, a timestamp, a truncated IP address, and a user agent. These are operational records used to keep the site up, and are not combined with anything else or used to build a profile.

Third-party requests

• Analytics: the Umami script is loaded from cloud.umami.is and sends page views to gateway.umami.is.
• Fonts: the Archivo typeface is loaded from Google Fonts, which sees the request.
• Site icons: a listing's brand mark is fetched from DuckDuckGo's icon service, which sees a request naming the tool's domain, not you.
• Listed tools: following a link hands you to that operator, whose own privacy policy then applies. This directory does not host or run any listed tool.

Submissions

Submitting a tool sends what you typed to a function in our own AWS account, which stores it in a private bucket. It is read by a person, used only to review that listing, and your email address is never published, sold, or added to a mailing list.

Stored alongside the submission: the time it arrived, your browser's user-agent string, and a hash of your IP address. The hash exists to stop one address flooding the form. The IP address itself is never written down.

Do not include an API key, password, or any credential. The endpoint checks for them and refuses the submission rather than storing it. See submit a tool.

A rejected submission is deleted. An accepted one becomes a listing; the contact details are kept only so we can reach you about it, and you can ask for them to be deleted at any time via corrections.

Questions

Email scout at @fantasyappscout.com.