What we keep, and why

BoringProducts (boringproducts.xyz) is a weekly launch board for software. We collect the minimum needed to run it: an account so you can vote and launch, the products you submit, and the emails you ask for. We don't sell data or run ads. We use Google Tag Manager to measure how the site is used.

1. Who we are

BoringProducts is run by the BoringNotch team. For anything in this policy, including access or deletion requests, write to hello@boringproducts.xyz.

2. What we collect

• Account details. When you sign in with Google, GitHub or X, we receive your name, email address and profile picture from that provider. When you sign in with an email link, we receive your email address. We don't ask for access to your contacts, files, posts or anything else, and we never post on your behalf.
• Sign-in sessions. A session cookie keeps you signed in. With each session we store the IP address and browser user agent it was created from, to spot abuse.
• Products you submit. Name, website, tagline, description, logo, category and pricing model. Approved products are public, along with your display name as the maker.
• Votes. Which products you voted for. Vote counts are public; who voted for what is not.
• Payments. Payments are handled by Dodo Payments, our merchant of record. We receive a payment ID, the amount, currency and status. We never see or store your card or bank details.
• Newsletter. If you subscribe, your email address is stored by our email provider, Xem, after you confirm by email (double opt-in).
• Abuse limits. We count requests per IP address or account for short periods (an hour or a day) to stop spam and scripted voting.

3. Information from public websites

When you paste a product URL, we fetch that public page and read its title, description and icon to draft your listing, using Cloudflare Workers AI. For free listings, we fetch the product's public homepage about once a week to check our badge is there. We sometimes list products from their own public websites as unclaimed; the maker can claim or remove those at any time from the listing page.

4. How we use it

• To run your account, show your products and count your votes.
• To send emails you need: sign-in links, review decisions, payment confirmations and badge notices.
• To send the weekly newsletter, only if you subscribed. Every issue has a one-click unsubscribe link.
• To prevent spam, fake accounts and vote manipulation.

We don't sell or rent personal data, and we don't use it for advertising.

5. Google user data

If you sign in with Google, we only use your basic profile (name, email address, profile picture) to create and identify your account. BoringProducts' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't share Google user data with third parties except the service providers listed below that host our app, and we don't use it to train AI models.

6. Who processes data for us

• Cloudflare: hosting, database, file storage and AI drafting.
• Xem: transactional email and the newsletter.
• Dodo Payments: checkout, payments, tax and receipts.
• Google, GitHub, X: only if you choose to sign in with them.
• Google Tag Manager: site measurement. It loads the analytics tags we configure, which can see pages you visit, your browser and an approximate location.

Each processes data under its own privacy terms. Some may store data outside your country.

7. How long we keep it

• Account, votes and products: until you ask us to delete your account.
• Sessions: until they expire (about a week) or you sign out.
• Abuse counters: hours to a day.
• Payment records: as long as tax and accounting law requires.
• Newsletter: until you unsubscribe.

8. Your choices

You can ask for a copy of your data, a correction, or deletion of your account by writing to hello@boringproducts.xyz from the email on your account. Deleting your account removes your votes and sessions; we'll remove or anonymise your products unless you ask us to keep the listing. You can unsubscribe from the newsletter from any issue.

9. Cookies

We use one essential sign-in cookie, and your browser's local storage to remember light or dark mode. Analytics cookies, set by the tags Google Tag Manager loads, are off until you accept them in the cookie banner. Until then those tags only send cookieless signals. You can change your choice any time with "Cookie settings" in the footer. We don't use advertising cookies, and the site works the same either way.

10. Children

BoringProducts is not meant for children under 16, and we don't knowingly collect their data.

11. Changes

If this policy changes in a way that matters, we'll update the date above and say so in the newsletter. See also our terms.