Privacy notice

Last updated 17 October 2026.

What we store

Public profile data: X handles (or Hacker News usernames), the public posts in which revenue was shared, links to those posts, and any name or bio you add when claiming. We find these in public posts and publish them labelled “as claimed”.
Claim details: the one-time ownership code, the handle and project being claimed, the time of the claim and, if you give it, an email address used only to contact you about the claim.
Stripe-derived revenue: when you verify, we read your Stripe charges and active subscriptions with a restricted, read-only key and store only the aggregates: monthly recurring revenue, net revenue for the last 30 days, currency and the number of active subscriptions. We don't store customer names, emails or individual transactions.
Restricted keys: if you choose “Keep connected” for the Live badge, your restricted key is encrypted at rest (AES-256-GCM) and used only for weekly re-checks. Only its last 4 characters are kept in clear. If you choose “verify once”, the key is used for that one check and never stored. We never accept full secret keys.
Submissions and removal requests: the URLs and details you send us.

Why, and where

We use this data to run a public leaderboard of revenue made with AI, to verify figures and to handle corrections. Our lawful basis is legitimate interests (publishing information people have made public) and, for verification, your consent. The data is held on Cloudflare's infrastructure (Workers and D1). We don't sell it or use it for advertising.

Your rights

Removal: ask us to remove your profile or a project through the removal form. We honour requests from the person featured without asking questions, normally within 48 hours.
Disconnect Stripe: revoke the restricted key in your Stripe dashboard at any time. Our next check detects this, deletes the stored ciphertext and removes the verified badge.
Access, correction and erasure: you can also request a copy of, or corrections to, the data we hold about you. Under UK GDPR you can complain to the ICO.