Privacy Policy

Overview

Shiplist ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we use it.

Analytics — signed-in app (PostHog)

For signed-in users we use PostHog to collect interaction events that help us understand how the product is being used. PostHog is only loaded on signed-in pages (/dashboard, /my-tools, /directories, etc.). Marketing pages never load PostHog.

Custom events we collect

• Wizard funnel — when you start the tool submission wizard, begin and complete a URL scrape, change wizard steps, or save your tool.
• Directory engagement— when you click a directory's Submit link.

Autocapture

PostHog's autocapture is enabled on signed-in pages. It records clicks, form submissions, and pageviews. We have explicitly excluded free-text inputs in the tool submission wizard from autocapture using the ph-no-capture class. Excluded fields include: tool name, tagline, description, feature rows, FAQ entries, founder name/email/location, social profile URLs, and the URL input field. These values are never sent to PostHog through autocapture.

Person properties

When you sign in we associate your PostHog profile with your account ID, email, display name, account role, signup date, active plan tier, and number of tools submitted.

Session replay

Session replay is disabled. We do not record your screen or input interactions.

Analytics — marketing pages (Datafast)

On marketing pages we use Datafast for traffic analytics and Stripe conversion attribution. Datafast uses cookies to attribute page visits to checkout completions. No personally identifiable information is collected or shared with Datafast.

Authentication & payments

Authentication is handled by Supabase. Payments are processed by Stripe. We do not store card numbers or payment credentials. Please refer to Supabase's privacy policy and Stripe's privacy policy for their respective data practices.

Data we collect

• Your email address — used for account creation and transactional email (order confirmation).
• Tool data you submit for processing: URL, name, description, and category.
• Payment information processed by Stripe. Shiplist does not store card numbers or payment credentials.

How we use your data

The tool data you submit (URL, name, description, and category) is used by a human team to fill out directory submission forms on your behalf. This is the Done-For-You (DFY) model — real people complete each submission using the information you provided.

Your email address is used for account authentication and transactional email. Analytics data is collected and used as described in the sections above.

Data retention

Your email address and submitted tool data are retained for the lifetime of your account. When you close your account or request deletion, your data is removed. To request deletion, email support@shiplist.co.

Your rights

You have the right to:

• Request deletion of your personal data.
• Request correction of inaccurate personal data.

To exercise these rights, email support@shiplist.co. We will respond promptly.

Cookies

We use the following cookies:

• sb-* — Set by Supabase on auth pages and the signed-in app. Maintains your authentication session.
• ph_* — Set by PostHog on signed-in pages only. Used for usage analytics. Session recording is disabled — we do not record your screen or input interactions.
• datafast_visitor_id, datafast_session_id — Set by Datafast on marketing pages. Used for anonymous traffic analytics and Stripe conversion attribution. No personally identifiable information is collected.
• shiplist_pending_order — Set by Shiplist (first-party, signed). Used during the checkout success flow to link your Stripe checkout session to your account.

Stripe may set its own cookies on stripe.com during the checkout redirect. Those cookies are outside our control and are governed by Stripe's privacy policy.

Contact

Questions about this policy? Email us at hello@shipli.st. See also our Terms & Conditions.