Privacy Policy

SubmitLists (submitlists.com) is a free, curated directory of places to submit a startup, product or business. This policy explains what personal information we collect, why, and the choices you have. We keep it short because we collect very little.

Questions or requests: [email protected] or our contact form.

What we collect

When you browse

You can use every list without an account. Like any website, our servers record standard request logs: IP address, browser (user agent), the page requested, the referring page and the time. We use them to keep the site running and to stop abuse such as automated scraping or attacks. We also use a web analytics service to count visits and see which pages and links are used, for example pages viewed, the referring site, browser and device type, and approximate location derived from your IP address. We do not use advertising trackers or social media pixels.

When you share SubmitLists

The "Support us" buttons open the social network you choose (such as X, Facebook, LinkedIn, Bluesky or Pinterest) with a suggested post. Nothing is posted unless you post it yourself, and that network's own privacy policy applies to what you do there.

When you create an account

To track your submissions you give us your name and email address, and you choose a password (we store only a secure hash of it, never the password itself). We also store what you add while using the site: your projects (a name and, optionally, a website) and the sites you mark as submitted.

When you contact us

The contact form sends us your name, email address, the topic, an optional website and your message. To filter spam, the form uses Google reCAPTCHA, and we keep the spam score it returns with your message.

How we use it

• To provide your account: sign-in links, password resets and saving your projects and progress.
• To answer your messages and suggestions.
• To keep the site secure and working: preventing spam, abuse and attacks, and fixing errors.
• To understand how the site is used, so we can improve the lists and pages.

We only send emails you need, such as sign-in and password links. We do not send newsletters or marketing emails, and we never sell, rent or trade your personal information.

Where the law asks for a legal basis (for example the GDPR): we handle account data to provide the service you asked for, contact messages to respond to you, and logs and spam checks for our legitimate interest in keeping the site safe.

Cookies and local storage

• Session and security cookies keep you signed in and protect forms from forgery (submitlists-session, XSRF-TOKEN, and a "remember me" cookie when you sign in).
• Theme: your light or dark mode choice is saved in your browser's local storage.
• Analytics: our analytics service may set cookies to tell new visitors from returning ones and to count visits.
• Spam protection (contact page only): our spam-protection provider, Google reCAPTCHA, may set its own cookies to tell people from bots.

Apart from analytics, these are strictly necessary or remember a choice you made. We use no advertising cookies. You can block or delete cookies in your browser settings; the site works without analytics cookies.

Who helps us run the site

We use a small number of trusted service providers for hosting, backups, content delivery and security, email delivery, spam protection and web analytics. They process information only to provide their service to us and are not allowed to use it for their own purposes. Some of them are located outside your country, including in the United States, so your information may be processed there, with the safeguards described in this policy.

Our error monitoring runs on our own servers. We may disclose information if the law requires it, or to protect the site and its users from fraud or abuse.

How long we keep it

• Account, projects and progress: until you ask us to delete your account. You can delete individual projects yourself at any time.
• Contact messages: as long as needed to handle your request and any follow-up, then deleted on request.
• Server logs: rotated automatically and overwritten after a short period, usually days to a few weeks.

Your choices and rights

You can ask us to access, correct, export or delete your personal information, or object to how we use it. Email [email protected] from the address on your account, and we'll respond within 30 days. Depending on where you live (for example Canada, the EU/UK or California), you may also have the right to complain to your data protection authority.

Security

The site is served only over HTTPS, passwords are hashed, access to our servers is restricted, and backups are encrypted. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

Children

SubmitLists is for founders and businesses and is not directed at children. You must be at least 16 to create an account.

Changes

If we change this policy we'll update the date at the top. For significant changes we'll also let account holders know by email.