Privacy Policy
Last updated: October 18, 2026
This page explains how WebIndexly uses information when you browse the directory, create an account or send a submission. We do not sell personal data. Contact [email protected] with privacy questions.
Browsing the site #
- You can browse public listings, articles and search results without an account. Submitting a website and using the member area require an account.
- Theme, layout preferences and recent searches may be stored in your browser. Guest saved websites stay on that device. Websites saved through a signed-in member account are stored on our server and linked to the account.
- We count outbound clicks and record search terms to understand directory use and improve results. The search log does not include an account identifier. Avoid entering private information into search boxes.
- Our hosting and Cloudflare process technical information, including IP addresses, browser or connection information, requested URLs and request times, to deliver and protect the service.
Accounts and essential cookies #
For an email account, we store your email address, display name, password hash, verification status and account timestamps. We do not store a readable copy of your password. If you choose Google or GitHub sign-in, we store the provider's account identifier and the profile information needed to connect your account. Those providers also process information under their own privacy policies.
We use an essential session cookie, called wxs, for sign-in and secure forms. Account security records also support verification, password resets and session revocation. These features are separate from optional local browser preferences.
When you send us something #
| What you do | What we store | Why |
|---|---|---|
| Submit a website | Your account identifier, verified email, website details, uploaded images, optional submitter name and submission history | To review the submission, show its status and provide feedback |
| Claim a website or suggest an owner update | Your account, claim or update details and verification information you provide | To check ownership and review changes |
| Save a website while signed in | Your account identifier and the saved listing | To show your saved websites across signed-in sessions |
| Suggest an edit or report a problem | Your message and, if you give it, your email | To fix the listing and reply |
| Join the newsletter | Your email | To send the newsletter |
| Upvote a listing | A keyed hash derived from an IP address and the vote record | To limit repeated votes |
Submission and account records may be kept with moderation decisions and feedback. Published listing details and approved editorial changes can appear publicly; your account email is not published as part of a directory submission.
Spam protection #
We use account verification, form checks, temporary request limits and Cloudflare Turnstile to reduce spam and protect genuine users. Turnstile processes browser and connection information under Cloudflare's privacy policy.
Application rate-limit records contain a keyed identifier, a count and an expiry time. We also retain keyed IP-derived identifiers with some form and voting records. These identifiers help link repeated activity; we treat them as security data, rather than promising they are anonymous. We do not store form text or passwords in request counters.
Automated checks can temporarily reject an attempt or ask you to retry. A burst of attempts does not automatically suspend your account. Email [email protected] if a check prevents a genuine submission. Editors review submissions before publication.
Other services we use #
- Hosting and Cloudflare: website delivery, security and traffic measurement.
- Our configured email provider: verification, account recovery, submission notifications and optional newsletters.
- Google or GitHub, when you choose them: account sign-in and linking.
- Configured editorial AI providers, when enabled: public website information used to prepare directory writing. These tools are not needed to sign in or submit a website.
We use information to provide the features you request, protect the service and review submissions. Optional newsletters require your subscription. Providers apply their own privacy practices; some processing may take place outside your country.
How long we keep data #
- Account information and member saved websites are kept while the account remains in use, unless removed through an available account control or a privacy request, subject to security or legal retention needs.
- Request counters expire after their applicable limit window. Routine maintenance removes expired counter records. Verification and reset tokens expire and used or old token records are cleaned up.
- Images attached to rejected submissions are removed by routine maintenance after 60 days. Submission records and moderation history may remain to handle feedback, repeat abuse and privacy requests.
- Rarely used search terms are removed after 180 days. More frequently used terms may remain to help improve the directory.
- Newsletter emails remain until you unsubscribe. Reports, approved submissions and ownership records may remain while needed to maintain the listing or resolve a dispute.
- Hosting and network logs follow the providers' retention settings. Backups can retain older copies until they are rotated or deleted; they are kept for recovery rather than ordinary account use.
Your choices #
You can ask to access, correct or delete information associated with you, or unsubscribe from the newsletter. Depending on your location, you may have additional rights to object, restrict processing or complain to a privacy regulator. We may need to verify a request before acting on it and may retain information where needed for security, disputes or applicable law.
Email [email protected] with the subject Privacy request. We aim to respond within 30 days, subject to applicable legal requirements.
Children #
WebIndexly is a general-audience directory and isn't directed at children under 13. We don't knowingly collect their data.
Changes #
We update the date on this page when the policy changes.