Vizloft
List

Privacy Policy

Last updated: October 2026

This page explains what data Vizloft collects, why, and who it's shared with. We collect the minimum needed to run the site.

What we collect

  • Profile ownership requests: your verified email, public proof links and explanations, website verification results, and review records. These are used to assess ownership and send claim decision emails. Request evidence and account emails are visible to you and administrators, not published on your profile.
  • Your email address: used to sign you in via a one-time code, and to send you transactional emails (sign-in codes, payment confirmations, listing-approved notices, comment notifications).
  • Listing details you submit: product name, tagline, description, URL, logo, category, and public builder names and profiles. Account and contact email addresses remain private.
  • Comments: the commenter's authenticated builder name and comment body are public. Account email is private and never displayed.
  • Votes: we don't require login to vote. To stop duplicate voting we store a one-way hash of your account identity or a signed browser identifier. We also apply IP-based abuse limits; voting is not proof of a unique person.
  • Payment records: amount, type, and status of any purchase. Card and payment details are handled entirely by Dodo Payments, our merchant of record; we never see or store them. Dodo Payments processes your name, email, billing address and payment details under its own privacy policy.
  • Profile visits: when you visit a builder profile while signed in, we record your most recent visit. The profile owner can see visitor counts; Pro analytics can show your public builder name, photo, and profile link. Free accounts receive no visitor identities. Anonymous visits are not identified, and account emails are never shared.
  • Badge activity: anonymous impression/click counts when your embedded badge is viewed elsewhere, with no personal data attached.

Google Search Console data

Product owners can choose to connect Google Search Console to their listing. When you do, you sign in with Google and grant Vizloft read-only access (webmasters.readonly). We never ask for your Google password and we cannot change anything in your Search Console account.

  • What we read: the list of Search Console properties you have access to, used once to find the property that matches your listed website, and for that property only, daily search clicks, impressions and average position. We do not read search queries, other properties, or any other Google data.
  • How we use it: to show you your search performance, to show a verified search card on your public product page, and to rank your product on the Vizloft search leaderboard. By default the public pages show rounded ranges rather than exact numbers; you can switch to exact numbers or hide your stats from public pages at any time.
  • Storage: we store an encrypted refresh token and the daily totals described above. We do not sell this data, share it with third parties, use it for advertising, or use it to train AI models. Our staff do not read it except to provide support you ask for, for security, or to comply with law.
  • Disconnecting: you can disconnect from your product page at any time. We then revoke our access with Google and delete the stored token and all search data for that listing. You can also remove access from your Google Account permissions; we then stop syncing and remove your stats from public pages.

Vizloft's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

We use a small number of service providers to run Vizloft: Resend (sending emails), Dodo Payments (processing payments as merchant of record), and IndexNow (notifying Bing and other participating search engines of your approved, public listing URL; no personal data is sent, only the listing's public URL). We don't sell your data to anyone. Optional social connections use X, LinkedIn or Threads to import the profile you authorize. Optional Search Console connections use Google as described above. For nearby builder suggestions, your browser can request approximate city/country from ipapi.co using your IP address; you can select a location manually instead.

Cookies

We use an httpOnly sign-in cookie, a signed visitor cookie for voting and placement counts, and temporary cookies for social and Search Console connection verification. Your unfinished draft is saved in browser storage. These are not advertising cookies.

Your choices

You can ask us to delete your account and associated data at any time by emailing [email protected]. Public listing content already indexed by search engines may take time to disappear from search results after removal.

Changes

If this policy changes materially, we'll update the date at the top of this page.

Contact

Privacy questions: [email protected]