Privacy Policy.

1. What we collect

Account data: your email address and password (stored only as a secure hash). Profile content you choose to publish: name, username, headline, bio, skills, location, links, images, projects. This content is public by design; that is the point of a directory. Messages you exchange with other users are private between the participants and us. Technical data: server logs (IP address, user agent, timestamps) kept for security and abuse prevention, a record of each sign-in to your account (time, IP address, browser) kept for security and payment-dispute purposes, and anonymized counters for page views used for listing analytics.

2. Cookies and analytics

We use one first-party session cookie to keep you logged in. We use Google Analytics and Cloudflare Web Analytics to understand traffic; these set their own identifiers and process data under their own policies. We do not run advertising trackers and we do not sell personal data to anyone.

3. Payments

Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers. We store only what we need to run your subscription: your Stripe customer id, plan, and billing status.

4. Email

We send transactional email (verification, password resets, message notifications, approval notices) through Resend. Message notification emails contain an unsubscribe link, and you can turn them off in account settings any time.

5. Where data lives

Data is stored on our servers and backed up nightly to encrypted-at-rest object storage (Cloudflare R2). Traffic is encrypted in transit (HTTPS via Cloudflare).

6. Who can see what

Your published profile and projects are public and appear in search engines, browse pages, and social share previews. Your email address is never shown publicly. Pending, paused, and removed listings are not publicly visible. Private messages are visible only to the two participants and, when investigating abuse reports, to the site operator.

7. Your controls

You can edit or delete your projects, pause your entire listing (hides everything, keeps the account), block users from messaging you, and disable notification emails. To delete your account and its data entirely, contact support; we delete within 30 days, except minimal records we must keep (such as payment records required for accounting).

8. Third parties we rely on

Stripe (payments), Resend (email delivery), Cloudflare (network, analytics, backups), Google Analytics (traffic measurement). Each processes only what it needs for its function.

9. Changes and contact

If this policy changes materially, we will update the effective date above. Privacy questions or data requests: contact support or email [email protected].