Privacy Policy

1. Who we are

Where To Submit ("we", "us") operates the website at wheretosubmit.org, a directory of launch and backlink submission sites for indie hackers and small SaaS teams. This page explains what data we collect and how we use it.

2. What we collect

• Account data. When you sign in, we store your email address and a hashed session token. If you sign in with Google, we receive your email and basic profile info from Google.
• Project data. Project names, product URLs, and the submission status you mark for each site. This is private to your account.
• Billing data. If you subscribe, Stripe processes your card and we store a Stripe customer ID, subscription status, and price ID. We never see or store your full card number.
• Analytics. If you accept cookies, Google Analytics records page views, referrers, and rough geolocation. If you reject, we run no analytics scripts.
• Server logs. Cloudflare records request metadata (IP, user agent, path) for abuse prevention. These logs are short-lived.

3. How we use it

• To sign you in and keep your session active.
• To save your projects and submission tracker so you can come back to them.
• To process payments and unlock paid features.
• To understand which pages are useful (only with cookie consent).
• To prevent abuse, spam, and fraud.

We do not sell your data. We do not use your data to train AI models.

4. Third parties

We share data only with services we need to run the site:

• Cloudflare — hosting, DNS, edge runtime, D1 database.
• Stripe — payment processing.
• Google — OAuth sign-in, Google Analytics (consent only).
• Resend — transactional email for magic-link sign-in.

Each third party has its own privacy policy. Stripe in particular handles all card data under PCI-DSS.

5. Cookies

We use a small number of cookies. The session cookie is required to keep you signed in. Analytics cookies only run after you click Accept on the cookie banner. You can clear cookies at any time from your browser.

6. Your rights

You can ask us to delete your account and the data attached to it. Emailhi@wheretosubmit.org from the address tied to your account. We'll confirm and delete within 30 days. Some records (paid invoices, fraud signals) may be retained where law requires.

7. Data retention

Account and project data is kept while your account is active. Billing records are kept for at least 7 years where tax law requires. Server logs are kept for up to 30 days.

8. Children

This service is not intended for users under 13. We don't knowingly collect data from them.

9. Changes to this policy

We'll update this page if our practices change and bump the date at the top. Material changes will be announced on the site.

10. Contact

Questions? Reach out athi@wheretosubmit.org.