Privacy Policy

1. What we collect

We receive your account ID, name and email through Clerk sign-in. We store submissions, product details and images, review feedback, ownership claims, votes, comments and email preferences. Public product information may also come from the website you submit or from editor research.

Published listings, founder details you choose to publish and comments are public. Submission emails, ownership evidence and review history are restricted to the relevant account and editors.

2. Why we use it

We use information to run accounts and listings, verify badges and ownership, prevent abuse, answer support requests and send service updates. Website imports and badge checks request public pages and images.

Where applicable data-protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and protecting the directory, consent for optional newsletters, and legal obligations where they apply.

3. Cookies, storage and analytics

Authentication and security services may use cookies. Your browser session storage holds submission drafts and sign-in return information. Blocking this storage may affect these features.

Google Analytics uses analytics cookies to measure public-page visits and runs by default unless you have disabled it on this browser. We do not send account details or form entries, and exclude account and editor pages. Page URLs omit query strings and fragments. Advertising personalisation and Google signals are disabled. You can disable Google Analytics using the control below. We remember an opt-out on this browser until you change it or clear browser storage.

Disable Google Analytics on this browser

Cloudflare supplies aggregate website traffic statistics. Ahrefs supplies a Domain Rating for indiedaddy.com. We also use Ahrefs Web Analytics to measure website visits and usage. Outbound links can include referral parameters identifying IndieDaddy. We count website clicks, using hashed network and browser information for repeat-click filtering; these are approximate activity counts, not verified unique people. Campaign measurement records views and clicks by placement with a temporary random page token, not an account identity or analytics cookie. The token expires after two hours; repeat-event records are removed after four hours when new events arrive. Daily totals are retained for campaign reporting. These counts are estimates, not sales or unique people. Hosting and security providers also process technical request information to deliver and protect the site.

4. Service providers

• Clerk: sign-in and account verification.
• Railway: hosting and database storage.
• Cloudflare: site delivery, security, traffic statistics and private backups.
• Google Analytics: optional public-page usage analytics.
• Ahrefs: website analytics and Domain Rating.
• Resend: transactional email.
• Discord: private operational alerts using event references, not submission emails or claim evidence.

Providers process the information needed for their services under their terms and privacy policies.

Public paid checkout is not open yet. When enabled, Stripe will process payments; IndieDaddy will retain order references, amounts, payment status and campaign records, not full card details.

Our providers may process information outside your country. You can contact us for information about the providers and applicable transfer arrangements. We do not sell your account email or share private account records with sponsors for their marketing.

5. Email choices

Newsletter emails are optional. They are separate from account, submission and campaign updates. Submitting a product does not automatically subscribe you. Change your newsletter choice in Workspace → Account, or email us. Newsletter sending has not started.

6. Retention and security

We retain records while needed to operate your account or listing, handle disputes, prevent abuse and meet applicable obligations. Public listings can remain after an account is closed; request listing removal separately. Backups and provider records may persist after changes to the active database. We do not currently promise a fixed automatic deletion period for backups.

Access controls and private backups help protect information, but no service can guarantee absolute security.

7. Your choices and rights

Email [email protected] to request access, correction, deletion or a copy of your information. Depending on applicable law, you may also have rights to restrict processing, object to processing based on legitimate interests, withdraw consent, or complain to your local data-protection authority. Withdrawing consent does not affect earlier lawful processing.

We may need to verify your identity before acting. Some records may need to be retained for security, disputes or legal obligations. Deleting a Clerk account does not automatically delete every IndieDaddy record.

8. Children

IndieDaddy is intended for adult founders and users, not children. Please contact us if you believe a child has provided personal information.

9. Policy updates

We will update this page when our practices change and provide additional notice where required. The date below identifies this version.