PRIVACY, WITHOUT THE FOG.

Controller and contact

LaunchThrone is operated by Alessandro Tafa, an individual and the controller responsible for the information described here. Address: Via Luosi 175, 41124 Modena, Italy. Email: launchthrone.support@gmail.com. You can also use launchthrone.com/contact.

This notice covers launchthrone.com, accounts, project submissions, comparisons, feedback and related support. Acknowledging it does not give blanket consent to optional processing. Other websites linked by projects have their own privacy practices.

Information we process

Account data includes email, display name or username, authentication identity, preferences and consent records. Supabase handles native authentication credentials. Google or GitHub sign-in, when chosen and enabled, supplies the basic profile information authorized in that flow, such as email, name, identifier and profile image where available. We do not receive your Google or GitHub password.

Project data includes descriptions, links, logos, images, video, ownership information and moderation history. We process votes, reason tags, ratings and feedback. Support messages may include your first name, last name, email address and message. Avoid uploading unnecessary personal information or sensitive material such as health records or identity documents.

We process request, browser, session, diagnostic and usage information to operate and secure the service. Providers may process connection IP addresses and technical logs. The application uses IP-derived hashes and session identifiers for security, rate limiting, consent evidence and comparison integrity. These identifiers are pseudonymous, not necessarily anonymous. Growth-event referrers may include an origin and path; query strings and fragments are removed.

The Founding offer is limited to one use per eligible verified account. Sharing an IP or network does not make another account ineligible. Its current claim uses an account identifier rather than the connection IP. Restricted historical anti-abuse records may remain where necessary.

New payments and subscriptions are disabled. Historical transaction, receipt, tax, entitlement or refund records, if any, may remain necessary for accounting, support and disputes. Polar is the designated Merchant of Record when paid purchases are enabled. Do not send card details or passwords to support.

Projects listed on a founder’s behalf

If you ask LaunchThrone to list a project for you, we process the project URL, requester email, optional notes, the ownership or representation declaration and its version and timestamp, verification status, and restricted security records used to prevent abuse. An administrator may also create a request following direct correspondence with a founder.

The requester email and the email authorised to claim the project are separate records and may differ. We verify the requester mailbox, check whether its domain matches the project, and where needed obtain confirmation from a website representative or record other permission evidence. This may include a correspondence note or evidence link, administrative decisions and an ownership-transfer audit trail. Permission to publish does not by itself authorise an unrelated account to take ownership.

We use these records to review the request, establish permission to publish, prepare the listing, send essential verification and publication emails, allow the authorised founder to claim it, and handle ownership or removal disputes. A claim requires an account with the authorised email verified. These service emails do not enrol anyone in optional project news.

Requester and authorised-founder emails, private request notes, permission evidence and claim credentials are restricted to the administration and service providers needed to process them. They are not shown as public project contact details by this workflow. An unclaimed public project is labelled as listed by LaunchThrone; after a claim, the normal project-owner and public-profile settings apply.

Purposes and legal bases

Information is used to authenticate and manage accounts; save and publish projects; provide comparisons, rankings and feedback; answer support requests; send essential notices; improve operation; prevent abuse; enforce service rules; and meet legal obligations.

Where EU or UK law applies, requested account and project services rely on performance of our agreement; proportionate security, moderation and service improvement rely on legitimate interests where your rights do not override them; mandatory records and disclosures rely on legal obligations. Optional project-news email and other processing requiring consent rely on consent. We determine the basis for the particular purpose rather than treating every activity as consent-based.

Optional project news requires prior opt-in. Withdraw it using unsubscribe, available email preferences or launchthrone.support@gmail.com. This does not affect earlier lawful processing or essential service messages. For Canadian users we obtain consent where required and use exceptions only where applicable law permits.

We do not sell personal information or use it for cross-context behavioral advertising. Project rankings are not automated decisions determining employment, credit or similarly significant outcomes about you. Our use of Google API information follows the Google API Services User Data Policy, including its Limited Use requirements.

Recipients and public content

Supabase provides authentication and database services; Cloudflare R2 stores uploaded media; Netlify hosts the site and server functions; Resend, with Mailjet where the configured fallback is used, delivers service email and opted-in updates; Google Gmail receives support correspondence; Cloudflare Turnstile supports bot prevention where enabled. Google and GitHub provide their selected sign-in services.

Providers receive information needed for their role under the applicable service terms. Some act as processors and others as independent controllers. Consumer Gmail must not be assumed to have the Google Workspace data-processing agreement.

Published project material is visible to visitors and other users; private drafts are not publicly listed. Feedback may be shown to the project owner without disclosing your private account contact details. External images, videos and linked websites may contact their hosting providers when loaded or opened.

Information may be disclosed where required by law, to address security incidents, protect rights or resolve disputes. A transfer of service operations may involve information being transferred with safeguards and any notice or choices required by law.

Cookies and measurement

Cookies and similar browser storage support sign-in, session security, preferences and editing continuity. First-party usage events support service measurement and abuse detection. We do not use Google Analytics or sell tracking data to advertising networks.

Browser controls can limit storage, but blocking necessary storage can prevent account or saving features from working. Non-essential storage or processing must have prior consent where the law requires it; acknowledging this notice is not a substitute.

We do not currently implement a separate Global Privacy Control or Do Not Track response. We do not sell data or engage in cross-context behavioral advertising regardless of those signals. Contact us to exercise any applicable objection or opt-out right.

International processing

We operate from Italy and use international providers. Cloudflare R2 media storage is configured with EU jurisdiction. Resend states that email content and related records are stored in the United States. Other processing locations depend on provider and service configuration; not every copy of all service data is promised to remain in Italy or the EU.

Where EU or UK transfer restrictions apply, a valid mechanism is required, such as an adequacy decision or Standard Contractual Clauses with any required supplementary measures. Supabase, Cloudflare, Netlify and Resend publish data-processing terms addressing transfers; applicability depends on the service. Consumer Gmail cannot be assumed to have the same contractual safeguards as Workspace. Contact us for information about the safeguards applicable to your data and copies where you are entitled to them.

Retention and deletion

Unpaid drafts normally expire 30 days after original creation; editing does not reset that deadline. Their saved text and uploaded media are subject to draft cleanup. While payments are closed, one eligible Founding follow-up draft may be retained for one year from original creation. Published projects are not subject to the unpaid-draft deadline.

Account data is kept while needed for the account; published content while its listing remains available, subject to removal and applicable rights. Closing an account or deleting a project does not necessarily erase completed competitive records or information required for security, consent evidence, accounting or disputes. Retained information is restricted, minimized or separated from public identity where possible.

Managed-listing requests, verification and permission evidence, essential-email delivery records and ownership-transfer records are kept while needed to process or support the listing and claim, protect against abuse or resolve a dispute. Claim invitations expire after 90 days and can be replaced while a project remains unclaimed; invitation expiry does not itself delete the underlying request or permission record. The retention criteria and rights described here also apply to this workflow.

Support and security records are kept as needed to resolve the matter, protect the service and meet obligations. Criteria include unresolved requests, risks and legal requirements; we do not promise one automatic deletion interval for every record. Backup removal follows the relevant provider cycle. Data no longer needed for a permitted purpose is deleted or anonymized.

Security

We use authentication, access controls, restricted service credentials and other technical and organizational measures intended to protect information. No system can guarantee absolute security. Keep your credentials secure and report suspected unauthorized access to support.

Users aged 13 and older

LaunchThrone is intended for people aged 13 or older. Minors must involve a parent or guardian where required by applicable law. When processing relies on consent and you are below the local age for independent digital consent, consent must come from a person with parental responsibility. That age may exceed 13; in Italy it is 14 for the relevant consent-based information-society services.

We do not claim that automated age or parental-consent verification is implemented. If we learn that information was collected from a child under 13 or without consent required by law, we will take steps to delete or restrict it. Parents and guardians can contact launchthrone.support@gmail.com.

Your rights and requests

Contact us to request access, a copy, correction or deletion. Depending on applicable law, you may also have rights to restriction, objection, portability, withdrawal of consent and review of qualifying automated decisions. Exceptions can apply, including legal recordkeeping and protection of other people’s rights.

Use launchthrone.support@gmail.com, launchthrone.com/contact or the postal address above. Available account and email settings can be changed in your dashboard. We may require proportionate identity verification or proof of an authorized representative’s authority. Verification information is used to handle the request, not unrelated marketing. We respond within applicable legal deadlines and explain refusals or necessary extensions.

You may complain to a competent regulator without contacting us first: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it); elsewhere in the EU or UK, your competent data protection authority; in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch); in Canada, the applicable federal or provincial regulator, including priv.gc.ca.

US state privacy rights

Relevant categories include identifiers and contact details, customer records such as names and support messages, internet or service activity, uploaded images and audio/video, and historical commercial records where a transaction occurred. We do not seek biometric identifiers, precise device location or education records for ordinary account use. A category name does not mean we collect every example listed in a statute. Sources, purposes, recipients and retention criteria are described above.

These categories may be disclosed to necessary providers and, for public project content, visitors. We do not sell information, share it for cross-context behavioral advertising or offer financial incentives in exchange for personal information. Founding is an account-based service offer.

Subject to applicable state law, you may have rights to know, access, correct, delete, receive portable data, obtain information about third-party recipients and opt out of sale, targeted advertising or qualifying profiling. We do not unlawfully discriminate for exercising rights. Authorized agents may act with proof of authority.

Send requests and appeals to launchthrone.support@gmail.com or launchthrone.com/contact. If we decline a request, you can ask us to reconsider; we explain the outcome under applicable deadlines. Where available you can then complain to your state attorney general or regulator. California residents may request information about disclosures for third-party direct marketing under the Shine the Light law; we do not make such disclosures for that purpose.

Changes and policy source

We update this notice when practices or requirements change, show the version date, and provide additional notice or seek consent where required. An update does not retroactively authorize an incompatible new use.

This Privacy Policy was generated with Termly and adapted to LaunchThrone. The published wording was edited by LaunchThrone; it is not a claim of legal review or certification by Termly.