Privacy policy

1. who is responsible

The operator of isthereanaifor.com (“the site”, “we”, “us”) is the data controller for the processing described here. Contact for anything privacy-related:hello@isthereanaifor.com.

2. just browsing

Reading the site requires nothing from you. We do not fingerprint browsers and do not build visitor profiles ourselves. Your light/dark theme choice is stored in your own browser's localStorage and never sent to us — see thecookie policy.

Analytics. We use Google Analytics 4. It sets a first-party cookie with a random identifier so that repeat visits can be counted, and sends Google the page you viewed, the referring site, your browser and device type, and a coarse location derived from your IP address (GA4 does not store full IP addresses). We see aggregate reports: visits, top pages, where visitors come from, what people search for on the site. We do not use it for advertising and we do not link it to your name or email. Legal basis: our legitimate interest in knowing which pages are read (GDPR art. 6(1)(f)). Google's own privacy terms apply to the processing on its side. You can opt out with Google'sbrowser add-onor by blocking cookies for this site.

The site is served by Cloudflare. Like every host, Cloudflare processes your IP address, user agent and the requested URL to deliver pages, block abuse and keep the site up. Those request logs are held by Cloudflare under its own retention rules; we do not export or inspect them per visitor.

3. when you submit a tool

The submit form asks for the tool's name, URL, task, category, pricing, a short pitch and your email address. We use it to test the tool and email you the verdict. The form is delivered through Web3Forms (a form-to-email service) to our inbox, which runs on Cloudflare Email Routing and Gmail (Google).

• Purpose: evaluating your submission and replying to you.
• Legal basis: taking steps at your request before a possible listing (GDPR art. 6(1)(b)) and our legitimate interest in running an editorial directory (art. 6(1)(f)).
• Retention: kept in our mailbox as long as the submission is relevant to a listing; you can ask us to delete it at any time.

4. when you buy a sponsorship

For the Top Slot and page spots you give us your product's URL and a bid or price. Then:

• We fetch your site's public metadata (title, description, favicon) server-side to build the listing. We do not accept typed-in names or taglines, so they cannot be spoofed.
• Automated moderation. The URL, the fetched name and tagline, and the page you want to sponsor are checked against our rules. Part of that check may be performed by Anthropic's Claude API. Only the listing data is sent — no payment data, no IP address, no email.
• Payment is handled by Stripe. Stripe collects your card details, billing email and whatever else it needs to process the payment and fight fraud, under Stripe's privacy policy. Card numbers never reach our servers. Stripe emails you the receipt.
• What we store in our own database (Cloudflare D1): listing name, URL, tagline, amount, the sponsored page, the Stripe session and payment identifiers, and the placement status. The listing itself is public by design.
• Purpose: delivering the placement you paid for, enforcing the sponsorship rules, handling refunds, keeping accounting records.
• Legal basis: performance of the contract (art. 6(1)(b)), our legal obligation to keep payment records (art. 6(1)(c)), and our legitimate interest in moderating what appears on the site (art. 6(1)(f)).
• Retention: payment records for as long as tax and accounting law requires; the public listing until its 30 days expire, after which it stays in our records as history.

5. when you email us

If you write to us we keep the thread for as long as it is useful to answer you and to remember what was agreed. Our mail runs through Cloudflare Email Routing and Google.

6. who else sees data

We do not sell personal data and we do not share it with advertisers. The only recipients are the service providers that make the site work, each bound by its own data-processing terms:

• Cloudflare — hosting, CDN, database, email routing, abuse protection.
• Stripe — payments and receipts for sponsorships.
• Web3Forms — delivery of the submit form.
• Anthropic — automated moderation of sponsorship listings.
• Google — our mailbox, and Google Analytics 4.

Some of these providers process data in the United States. Where that happens, the transfer relies on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. We may also disclose data when the law requires it.

7. your rights

If you are in the EU/EEA, the UK, or anywhere with similar rules, you can ask us to:access the personal data we hold about you, correct it, delete it,restrict or object to its processing, or hand it over in a portable format. Email hello@isthereanaifor.comand we will answer within a month. You also have the right to complain to your local data-protection authority. Payment records we are legally required to keep are the one thing we cannot delete on request.

8. children

The site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child sent us something, tell us and we will delete it.

9. security

Everything is served over HTTPS. Payment data is handled by Stripe, not us. Our own database holds only the public listing data described above. No system is perfectly secure; if we learn of a breach affecting you we will let you know as the law requires.

10. changes

If we ever add a newsletter, accounts, advertising or anything else that touches personal data, this page changes first and the date at the top moves. We will not quietly change what we collect.