What we keep, and what we don't.

Drop alerts

If you sign up, we store your email address (lowercased), the time you signed up and a random unsubscribe token. It's used only for drop alerts. It's never shown on the site, sold or shared. Alert emails haven't started yet; signups are stored until our sending address is live. Every signup gets a one-click unsubscribe link, and you can also DM us on X to be removed.

Drop submissions

When you submit a drop we store what you entered: the startup or X handle, the drop link, an optional image (a link, or an uploaded jpg, png or webp up to 3 MB) and an optional note. Each submission gets a random tracking link that shows only its review status. Submissions are reviewed before anything appears, and only the drop details (never your note or anything about you) are published.

Spam protection

To limit abuse we keep a one-way hash of your IP address with short-lived rate-limit counters, never the address itself.

Where it's stored

In a Cloudflare D1 database. Uploaded images go to private Cloudflare R2 storage that only our review queue can open; they are never served from there to the public. A rejected image is deleted right away, and an image nobody has reviewed after 30 days is deleted too. If a drop is approved, a resized copy of its image is published with the drop.

Images and X posts

Drop images load directly from their original sources, except approved community uploads, which we host as a resized copy. X posts on startup pages load only if you choose "Load posts from X"; after that, X's privacy policy applies.

Cookies

None. No analytics or ad trackers.