Privacy Policy

What we collect when you sign up

• Your email address, used for your account and for sign-in.
• Your GitHub profile info, if you connect GitHub. This is how sign-in via GitHub works, and it's also what unlocks the ability to review other founders' apps.

What we collect passively

• An anonymous visitor cookie, called fs_vid. It's a randomly generated ID set for every visitor, signed in or not, lasting one year. It's used purely to dedupe ad impressions and clicks on sponsored listings, and it isn't linked to your identity unless you're signed in.
• Country-level location, from your IP address. We look up which country a request is coming from for ad analytics. We don't get or store your precise location, just the country.
• Page views and clicks on sponsored listings, tied to the fs_vid cookie above, so we can show founders how their Featured listing is performing.
• Your IP address, briefly, for rate limiting. This is used to prevent abuse of certain actions (like starting a lot of payment checkouts in a row) and isn't stored long-term.

Payments

• Payments are handled entirely by Dodo Payments, for the optional Featured ad boost on your own listing. We never see or store your card details.
• We store the payment ID and amount, so we know a payment happened and can activate your boost. That record comes from a signed webhook Dodo sends us after a payment succeeds, not from anything typed into our own site.

Where your data lives

• Everything is stored in Supabase, on Postgres, with row-level security policies restricting who can read what. Your own account data is only readable by you and by the backend logic that needs it to run the product.
• The app itself runs on a self-managed server, not a third-party hosting platform, for what that's worth to you.

What we don't do

• We don't sell your data. We don't share it with third-party ad networks either. Sponsored placements on FounderStack are paid listings from founders on the platform itself, not ads bought through an external ad network.
• We don't use third-party analytics or tracking tools. The ad tracking described above is self-hosted and first-party, not a plugged-in service from another company.

Your rights

• You can delete your own app listings yourself, any time, from your dashboard.
• There's no self-serve option yet to delete your account and personal data. If you want your account and associated data removed, message support from your dashboard, or email the address below, and I'll handle it manually.

Changes to this policy

• This policy may be updated as the product changes. Significant changes will be made noticeable, not buried in a quiet edit.

Contact