Privacy policy
Last updated 27 May 2026
Startup Alternatives is a small indie directory run by one person. This page explains exactly what data we collect, why we collect it, where it lives, and how you can remove it. No dark patterns, no third-party trackers.
What we collect
- Account: when you sign up we store your name, email and a bcrypt-hashed password. We do not store your password in plain text.
- Comments & suggestions: anything you post on a tool page, plus its timestamp, is stored against your account.
- Submissions: if you submit a startup, the form fields you provide (name, URL, tagline, category, optional logo + featured image) are stored against your account.
- Sessions: when you log in we set a single
sa_sessionhttpOnly cookie containing a signed JWT with your user id, name and email. It lasts 30 days. No third-party can read it. - Server logs: Cloudflare records standard access logs (IP, user agent, path) for abuse prevention. We do not analyse these for marketing.
Third-party services
- Cloudflare — hosting (Workers), database (D1), file storage (R2), DNS, CDN.
- Google's favicon API — we fetch favicons via
https://www.google.com/s2/faviconsto display brand icons next to each tool. Your browser makes the request directly to Google when the image loads. We do not pass any identifying info. - Cloudflare Web Analytics (when enabled) — privacy-friendly, cookie-free, GDPR-compliant page-view analytics. No personally identifiable information is collected.
What we don't do
- No advertising trackers.
- No selling or sharing your data with anyone.
- No third-party analytics that build profiles of you.
Your rights
- Access: email hello@startupalternatives.com and we'll send you everything we have about you within 30 days.
- Deletion: same email gets your account, comments, suggestions and submissions removed within 30 days.
- Correction: log in and edit your profile, or email us.
Children
The site is not directed at children under 13. We don't knowingly collect data from them.
Changes
If we materially change this policy we'll update the date above. Carry on browsing the directory →