Cloudsteading
directory / privacy

Privacy

Last updated 2026-04-29

Short version: we collect the minimum we need to run a directory, ship a newsletter, and keep the comments civil. We do not sell your data and we do not run third-party ad trackers.

What we store

  • Email and optional name — when you sign in (magic link) or subscribe to the digest. Stored in our Cloudflare D1 database.
  • Listings, votes, and comments — anything you publish on the site is stored against your account.
  • Submission drafts — saved server-side so you can resume them.
  • Audit log — moderation actions on your listings (approve, feature, delete) are logged for accountability.
  • Coarse request metadata — IP address (used for Turnstile verification and rate limiting), user-agent, and request timing. Cloudflare retains its own server logs as part of running the edge.

What we do not store

  • No third-party ad pixels (no Meta, Google Ads, LinkedIn, TikTok, etc.).
  • No cross-site behavioural tracking.
  • No password — sign-in is magic-link only.

Why we use what we use

  • Cloudflare Turnstile — bot/spam protection on the signup, comment, and submit forms. Replaces CAPTCHAs.
  • Cloudflare (Workers, D1, KV, R2, Workers AI) — the entire platform runs here. Data is stored in Cloudflare's regions.
  • Email delivery — magic links and the weekly digest are sent through a transactional email provider. They process your email address only to deliver.
  • GitHub API — when you submit a listing, we call the public GitHub API to verify the repo exists and is public. We do not import private code.

Cookies

We set one first-party session cookie when you sign in. That is it. No analytics cookies, no ad cookies.

Your data, your call

  • Export — email us and we will send your account contents as JSON.
  • Delete — email us and we will remove your account and any listings you authored. Approved listings may be retained in anonymised form (writeup + costs) if they have community engagement attached.
  • Unsubscribe — every digest email has a one-click unsubscribe.

Children

Cloudsteading is not directed at children under 16. If you are under 16, please do not submit listings or sign up for the newsletter.

Changes

Material changes to this policy will be announced on the blog.

Contact

Privacy questions, deletion requests, or anything else — email hello@cloudsteading.com.