Privacy Policy
This policy explains what productindex.org, operated by Vanilla Software, L.L.C., collects and why. We only collect what the Site needs to work.
What we collect
If you only browse: nothing tied to you. Our host, Cloudflare, records standard request data (IP address, browser user agent, requested page, time) in server and security logs, and Cloudflare Web Analytics counts page views without cookies or cross-site tracking.
If you sign in:
- Your email address, used to send one-time sign-in codes and to identify your account.
- A temporary sign-in code, stored for up to 10 minutes and deleted after use or expiry.
- Your username, display name, account creation date, and a profile photo if you add one.
- The products you favorite and your profile settings (for example, whether your favorites are public).
Cookies
pi_session: a signed, HttpOnly cookie that keeps you signed in for up to 30 days.pi_username: shows your username in the page header; it grants no access.pi_username_setup: a short-lived (1 hour) signed cookie used only while you choose a username.
We do not use advertising or third-party tracking cookies.
How we use it
To sign you in, show your profile and favorites, keep the Site secure, and fix problems. We do not sell or rent your data and do not use it for advertising.
Who processes it
Account data (email, username, profile, favorites and sign-in codes) is stored in productindex.org’s own database on our server and is not shared with any other site. The product catalog is read from a database hosted by Supabase, and the Site is served through Cloudflare. Sign-in emails are sent through our email provider.
Public information
Your username, display name, profile photo, join date, and (unless hidden in settings) your favorites appear on your public profile page.
Retention and your choices
We keep account data until you ask us to delete it. Email [email protected] to access, correct, export, or delete your data; we respond within 30 days. Server logs are kept only as long as our hosting providers retain them for security and operations.
Children
The Site is not directed to children under 13, and we do not knowingly collect their data.
Changes
We will update the effective date above when this policy changes. See also our Terms of Use.