What we collect
- Account data: your email, account identifier, authentication records, and basic name/avatar information from Google or GitHub when you choose those sign-in methods. Passwordless email sign-in is also available through Supabase Auth. We do not request repository, file or contact access.
- Listings: the names, websites, descriptions, categories, tags, maker names, images and other product facts you submit, plus moderation records. Published listing information is public; account email and private review notes are not.
- Support: messages you send to hello@buzzlaunches.com and information needed to reply. Resend receives support mail and forwards it to the operator’s private mailbox.
- Email preferences: optional account communication choices you save. Requested sign-in links and necessary account/security messages remain essential.
- Security: keyed hashes of request IP information for abuse limits. Infrastructure providers may process technical network logs under their own policies.
Why we collect it
To operate the catalog, let you sign in, manage and publish product listings, protect the service from abuse, respond to support requests, and send account or listing messages. BuzzLaunches is operated by Krishna Sagar. We do not sell personal data.
Analytics you can choose
Our first-party analytics and Google Analytics load only after permission, and we honor Do Not Track. If you allow analytics, a first-party browser identifier lasts up to 90 days. We store its one-way hash with public-page views, product visits, outbound clicks and session activity. We store bounded campaign labels and referring website domains for session entry attribution, plus broad referrer groups. Full referring URLs, their paths and arbitrary query values are not stored in analytics. Aggregate sources, mediums and campaign names appear on public stats and in maker reports. Campaign labels must not contain personal or confidential information.
We record approximate country codes supplied by Vercel and broad device, browser and operating-system categories. We do not store raw IP addresses or user-agent strings in analytics, city/GPS locations, keystrokes, mouse coordinates or session replay recordings. Known bots, staff and tests are excluded.
Visits and clicks are deduplicated in 30-minute windows. Sessions end after 30 minutes without tracked activity. Foreground heartbeats estimate active viewing time and online presence, pausing in background tabs or after five minutes without interaction. Aggregate platform statistics and aggregate activity on approved, published products are public. Makers also see aggregate reports for their products. Raw visitor records remain private.
Google Analytics 4 measures public traffic and deliberate actions such as sign-in, listing starts and submissions. Advertising personalization and Google Signals are disabled. We remove arbitrary query strings, URL fragments, form contents and account identities from analytics events. Private account pages and authentication callback URLs are not recorded as page views. Google processes its reports separately under its own privacy policy, potentially internationally.
Resetting consent stops future collection and clears the site’s analytics cookies. Previously recorded activity may remain in the live window for up to 60 seconds, and previously collected aggregate reports are not erased by resetting a browser preference.
Who we share it with
- Vercel: website hosting and delivery.
- Supabase: database, public media storage and authentication, with the project hosted in India.
- Google and GitHub: authentication when you choose their sign-in method.
- Resend: account and listing email delivery, support receiving and forwarding.
- Google Analytics: optional analytics after consent.
- Checkly and Rollbar: availability checks and application error reporting. Error reports exclude request bodies, cookies, account identities and query strings; they do not record form values or session replays.
No AI drafting service receives listing text as part of the deterministic website metadata import. The importer reads public SEO/Open Graph information; published images are supplied by the website or maker.
Retention and your choices
We retain account and listing data while needed to operate the service, subject to legitimate security or legal requirements. Raw analytics events, sessions and page visits are kept up to 180 days. Minute-level activity and test analytics are kept seven days. Cleanup runs hourly, so removal can follow the cutoff by a cleanup batch. Expired abuse-limit records are removed after one day and cleanup logs after 30 days.
Contact hello@buzzlaunches.com to request access, correction, export or deletion. We may verify account ownership before acting. Deleting an account removes its listings and votes. Manage optional email choices from your account.
International processing
Providers may process data outside your country. Do not put sensitive personal information in a public listing. This service is intended for adults who can accept its terms. We update this policy as the service changes.
Last updated: October 23, 2026