Privacy Policy

Spacerr LLC operates SpacerrApps. We collect as little as the service needs: an email address to sign you in, the app details you choose to submit, and what Stripe needs to bill you. We measure how the site is used with our own product analytics, described in section 6. There is no advertising network and no advertising pixel on this site.

Reading SpacerrApps requires no account. It does set an analytics cookie, and section 6 says what that is and what it is not.

If you have an account we email you about it, and we also send optional mail you can switch off in one click. Section 7 lists every kind we send and how to stop each one.

• Account data: your email address, and your name and profile image if you sign in with Google. This is what identifies your account and where we send sign-in codes.
• Email preferences: which of the optional kinds of mail in section 7 you want, so that turning one off stays off.
• App submissions: the name, URL, icon, subtitle, description and keywords you give us about your app, plus which posts were generated from it.
• Billing data: held by Stripe. We store an identifier linking your account to your Stripe customer record, plus your subscription's status and dates. We never receive your card number.
• Messages: anything you send us through the contact form or by email, and our replies.
• Invitations: if we offer you a free month before you have an account, we store the address we sent it to, who sent it, when it expires and whether it was claimed, so that the offer can be used once and then stops.
• Operational logs: standard server logs, including IP address and user agent, kept briefly for security and debugging.

We do not ask for, and do not want, any special-category personal data. Please do not put any into an app description.

• To run your account and sign you in. Necessary to perform our contract with you.
• To generate and publish posts about the app you submitted. The service you bought.
• To take payment and manage your subscription. Necessary to perform the contract.
• To reply to you when you write to us. Our legitimate interest in supporting the service.
• To tell you what is new here and to offer you a paid placement. Our legitimate interest in marketing our own service to the people already using it, and where the law requires consent instead, your consent. Every message says how to stop it and you can stop it before we send any.
• To keep the site secure and working. Our legitimate interest, and in places a legal obligation.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

Posts are drafted by a large language model and then reviewed by a person before publication. To do that we send the app details you submitted to our AI provider: the name, the URL, the tagline, the description, who it is for, the categories, the platforms, the pricing and the search terms.

Those details are business information about a product, not personal data about you, unless you choose to put personal information into a description. We ask that you do not.

We route AI requests through the Vercel AI Gateway to OpenAI. We use their API rather than a consumer product, and we do not authorise the use of submitted content to train third-party models.

We keep this list short on purpose, and it names everyone:

• Vercel: hosting and delivery of the site.
• Neon: the managed Postgres database where accounts, submissions and posts are stored.
• Stripe: payment processing and subscription management.
• Resend: email delivery, both the mail your account needs (sign-in codes, receipts, notices about your listings) and the optional mail described in section 7.
• Vercel AI Gateway and OpenAI: drafting post content from your submission, as described above.
• PostHog: product analytics, as described in section 6.
• Google: only if you choose to sign in with a Google account.

Each of these acts on our instructions under its own agreement with us. Some are based in the United States; where personal data moves between regions it does so under the transfer mechanisms those providers offer.

The session cookie, set when you sign in, is what keeps you signed in. It is strictly necessary, so it does not need consent, and it does not follow you anywhere else.

We also run PostHog to measure how the site is used: which pages are read, which links are followed, where people give up, and any error the page throws in your browser. It sets a cookie holding a random id so repeat visits are counted as one person rather than as several. That id is not your name, your email or your IP address.

Anonymous readers are counted but not profiled: a stored profile is only created for accounts that sign in, and that is a setting in our own code rather than a promise about someone else's defaults. We do not sell this data, we do not share it with an advertising network, and there is no advertising cookie or third-party ad tracker on this site.

The same PostHog project covers our other products, so we can compare them. Browser Do Not Track and Global Privacy Control signals are respected by the analytics library, and all of this measurement runs in your browser, so turning those signals on stops it.

Separately from PostHog, each listing carries a click count, and it is the number shown on the listing itself. It goes up by one when somebody opens that listing from the directory, and by one when somebody follows the link out to the app's own site. It counts presses, not people: the same person clicking twice counts twice, and nothing is de-duplicated.

That count is a single number stored against the listing and nothing else. We do not record who clicked, when they clicked, what page they came from, their IP address or any identifier, so the count cannot be traced back to you and there is nothing in it for us to hand over or delete. It is sent by your browser as it leaves the page, and blocking scripts stops it.

Three kinds, and only the first is unavoidable.

• Account mail. Your sign-in code, a receipt, the decision an editor made on your listing, the notice that it went live. You get these because of something you did, and they run for as long as the account is open.
• Activity mail. Somebody commented on your app, the day's upvotes, a reminder while a listing is still waiting on its badge. One switch in your account, under Comments and upvotes.
• Product and marketing mail. What is new here, what other people launched, and the occasional offer on a paid placement. Two switches in your account, Product updates and Marketing, and either can be off while the other is on.

Optional mail is on by default and off the moment you say so. That is an opt-out rather than a consent: you are getting it because you signed up for the service it is about. Every optional message carries an unsubscribe link that needs no password and no sign-in, and your mail app's own unsubscribe button works on them too. The same switches sit on the Account tab of your dashboard.

We do not sell, rent or share your address, and nothing is sent on anybody else's behalf. Switching optional mail off does not close your account and never touches the mail your account needs to work.

One message goes to addresses with no account behind them: an offer of a free month, sent by hand, one address at a time, to somebody we think should be listed here. It is not a list and nothing repeats. It carries the same unsubscribe link, and using it puts the address on a do-not-send list that every optional message here is checked against, whether or not you ever create an account.

• Account data: while your account is open. If you close it, we keep it for 30 days so that signing in again restores it, then anonymise it: email address, name and picture erased for good.
• App listings: indefinitely, and they stay published after an account closes. A listing is a permanent link we promised, and it is the whole of what a free submission buys.
• Published news: indefinitely. A published article is part of the archive and stays up unless it is removed for a reason described in the Terms.
• Billing records: as long as tax and accounting law requires, typically several years.
• Contact messages: as long as needed to handle the conversation and any follow-up.
• Server logs: a short rolling window.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive it in a portable form, or complain to your data protection authority.

Write to https://spacerrapps.com/contact and we will act on it. We will not treat you differently for exercising a right.

Closing your account is not the same as erasing your app listings or the news published about them. Closing it erases the personal data on the account; the listings and articles stay online, because publication and a permanent link are the service you were given. To have one of those changed or taken down, write to https://spacerrapps.com/contact saying which one and why, and an editor will act on it. Where the law requires erasure, we do it regardless.

This service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will remove it.

Traffic is served over HTTPS, secrets are held as environment configuration rather than in code, admin surfaces are gated by role and excluded from search engines, and card data never reaches our servers.

No system is perfectly secure. If we become aware of a breach affecting your personal data we will notify you and the relevant authority as required by law.

If we change this policy materially we will update the date at the top of this page and, where it matters, tell you directly.

Spacerr LLC is the data controller. Reach us at https://spacerrapps.com/contact, or by post at 30 N Gould St Ste N, Sheridan, WY 82801, USA.