Browsing
- No accounts and no ad or third-party tracking scripts. We set no cookies for analytics.
- We count visits with our own cookieless, first-party analytics: the page, the site you came from (just its name), your country, your device type (phone, tablet or computer), which sponsor spots were shown or clicked, which outside sites you click through to (just their names), and anonymous page speed. Searches are counted by length only; we never see what you type.
- To count unique visitors per day we use a keyed hash of your network address, browser and the date. It rotates every day, so visits on different days cannot be linked, and it cannot be turned back into an address. We never store raw IP addresses.
- Analytics data is kept for 3 months, then deleted automatically. Automated traffic (bots) is excluded.
- Our own team opts out of analytics with a first-party setting on their own devices, so our visits are not counted. It is the only cookie the site uses, and only on the team's devices.
- Your theme choice (light or dark), and which bots you already downloaded today, are saved only in your own browser.
- Our host, Cloudflare, keeps standard technical logs to run and protect the site.
Forms
- The suggest and request forms store only what you type: the bot name, link, request type and note.
- The list your bot form stores: the X post or x.ai share link (without any query or fragment), your X handle, the bot name, money category, what it does, the tools it connects to, your one-line summary, your consent tick, your opt-in choice for showing the description or prompt, and the ownership code we show you. It has no email field. The code only proves the request came from your X account; we check it by hand and publish nothing until then. Your handle and the link are public on X already; if the listing is published they appear on it with credit to you.
- On the suggest and request forms your email is optional. If you give it, we use it only to reply about that request.
- The signup box on the home page stores only your email address, so we can tell you about new bots once we start sending updates. We have not sent any yet, and the site itself never sends email. To be removed at any time, use the request form. Never shared or sold.
- The services inquiry form stores what you type: the product you picked, your name, work email, business, the bot or use case, your goal, budget pick and message. We use it only to reply about that inquiry. No email is sent automatically.
- The sponsor inquiry form stores your name, company, work email, website, the slot and budget range you pick, and your message, so we can reply about sponsorship. The site never sends email.
- Payments happen on Stripe's own checkout page, never on this site, and we never see your card. Stripe sends us your name, email, the product, the amount and a session id so we can start your order; we keep that record to run the order and for our accounts.
- Submissions are stored in Cloudflare (Workers KV) and deleted automatically after 180 days, or sooner once handled.
- We do not store your IP address. To stop spam, submissions are rate-limited per network using a short-lived keyed hash of the network address (a secret key, not a plain hash), which is never saved with your submission.
Download counts
- When you press Add or Copy prompt, we add one to that bot's public download count. No name, account or cookie is involved.
- To count each visitor once per bot per day, we keep a keyed hash of your network address, the bot and the date (a secret key, so it cannot be turned back into an address) for at most two days, then delete it. We never store your IP address.
Links out
Listings link to X, x.ai and other sites. Those sites have their own privacy rules.
Your requests
To see, fix or delete anything you sent, or to ask about privacy, use the request form. We review requests and act on removals within 7 days.