Privacy
The short version: we collect what the product needs to work and nothing else. No ad trackers, no third-party analytics, no selling data. Ever.
Last updated July 30, 2026
What we collect
- Account email. Sign-in is passwordless: you give us a work email, we send a magic link. The email is the account — we use its domain to verify company claims, and to send you the links you request. No marketing email without asking first.
- What you submit. Claims, stack declarations, notes, and profile edits are stored and displayed as part of the record — that is the product. Visibility controls work as labeled.
- Anonymous page counts. Our own first-party counter records the page path and the referring site for each public page view — nothing else. No cookies, no IP addresses stored, no fingerprinting, no cross-site tracking. It cannot identify you.
Cookies
One kind: the session cookie that keeps you signed in after a magic link. No cookie exists for signed-out visitors, which is why there is no cookie banner.
Where it lives
Data is processed by Supabase (database and authentication), Vercel (hosting; standard server logs), and Resend (delivering the sign-in emails). Each processes data only to run the service.
Your data, your call
Want your account or its data deleted, or want a copy of what we hold about you? Email ryan@seahawkmedia.com and it's done. Note that editorial records about companies (ownership, investors, taxonomy) are compiled from public sources and are not personal data — corrections for those are covered in the terms.
Changes
If this policy changes, the date above changes with it. We won't quietly start collecting more than what's described here.