Privacy policy

LaunchLens is a directory where creators list products and visitors discover them. This page says what we hold about you, why, who else handles it, and how to have it corrected, exported or erased. The person or company responsible for it is named under Contact.

What we collect

• Account data: your email address, display name and a hashed password. If you sign in with Google we receive your email address, name and whether Google has verified the address; we never receive your Google password. Moderators and administrators also store an encrypted authenticator secret and hashed recovery codes.
• Listing data: everything you submit about a product, including images, which we re-encode and strip of metadata such as location. Listings are public once approved, and so is the display name you publish them under.
• Comments and votes: a comment is shown with your display name. A vote is tied to your account so that each account votes once; the vote count is public, who cast it is not.
• Usage data: when someone clicks through to a listed website we record the click with a salted hash of the IP address — never the address itself — and a shortened referrer. Raw click records are deleted after about 90 days; only daily totals are kept.
• Security records: signing in, changing a password or email, and every action by an administrator or moderator is written to an audit trail, with a salted hash of the IP address. Warnings and errors from the site are kept in a log for 30 days. Neither contains your password, card details or the text of your messages.
• Copies of our emails: a copy of every email we send you, such as an address confirmation or a listing decision, is kept in a mailbox that only the operator can read, so that we can support you and check the service is working.
• Newsletter: if you subscribe we store your email address and whether you have confirmed it. We only send after you confirm, and every email carries an unsubscribe link.
• Payments are handled by our merchant of record, Dodo Payments. We never see or store card details; we keep a record of what was bought, for how much, and whether it was refunded.

Why we use it

To run your account and the listings on it, to review listings and keep spam and abuse out, to take payment for the paid services, to send the emails you have asked for and the ones the service needs (confirming an address, resetting a password, telling you a listing was approved or rejected), to count how often listings are visited, and to keep the site secure.

Who else handles it

We use a small number of service providers, each only for the job described:

• Amazon Web Services hosts the site and its database.
• Dodo Payments takes payment and issues refunds, as the merchant of record.
• Google provides sign-in if you choose it and, only if you accept analytics cookies, Google Analytics.
• Our email provider delivers the email we send.
• An AI provider (currently Google, through its Gemini models; we may change provider) helps us in three places: it can draft a listing from a product's own website when the creator asks for that, it can flag a submitted listing for closer human review, and it writes the article that comes with the SEO Engine plan. What is sent is the listing's public content or the product website's text, not your account details. AI never approves or rejects a listing; a person makes every moderation decision.
• Bing and other search engines that support IndexNow are told the address of a page when it is published. That is a web address, not personal data.

We do not sell your data and we do not use it for advertising.

Cookies

Essential cookies keep you signed in and protect forms against cross-site request forgery; without them the site does not work. Non-essential cookies, such as analytics, are used only after you accept them in the cookie banner. You can change your choice by clearing this site's cookies.

How long we keep it

• Raw click records: about 90 days. Daily totals are kept.
• Site logs: 30 days.
• Payment records and the audit trail: kept, because we need them for accounting and to be able to reverse or explain a payment, even after an account is erased. They refer to your account by an internal identifier, and once the account is erased that identifier no longer leads to a name or email address.
• Everything else: while your account exists.

Your rights

You can do most of this yourself under Account settings: download everything we hold about you as a file, change your name, password or email address, and delete your account. Deleting takes effect at once: your listings are archived, and your name, email address, password, authenticator and linked sign-in accounts are removed from the account, which can never be signed in to again. You can also ask us to correct your data, restrict how we use it, or object to its use. To use any right you cannot use yourself, or to complain, contact us at the address below. If you are not satisfied with our answer, you may complain to the data protection authority where you live.

Children

LaunchLens is not meant for anyone under 16, and we do not knowingly collect data from them. If you think we have, tell us and we will delete it.

Contact