Privacy
What WhatAreYouBuilding.AI stores, who else sees it, and how to get rid of it.
Who is asking
WhatAreYouBuilding.AI is an independent project by Neta Dror (@netadror), run from the Netherlands. She decides what is collected here, which makes her the data controller in the sense the GDPR means it, and the contact address above reaches a person rather than a queue.
Browsing needs no account
You can read the whole directory, search it, filter it and follow every link on it without signing in and without agreeing to anything. An account is needed only to submit a listing or edit one.
What gets stored
Listings. Everything you type into a submission — the product, the one-liner, your name, your location, your links, any address you add — is published on the site and served over the public API and MCP server. Treat it as public, because it is: it is readable by anyone, including scrapers.
Your account. Signing in stores your email address and an account id, through Firebase Authentication. That is the whole account: there is no profile, no password held by us, and nothing else attached to it.
The waiting list. If you sign up for the weekly briefing we store the address you gave, what you said you were interested in, and your note. That collection can be written to and never read back by the site itself.
Impressions and clicks. Each listing counts how often it was seen and clicked, and those totals are public. Counting without a login means telling two visits apart, so the server takes a salted hash of the IP address and browser string, keeps the first 32 characters, and uses it only to notice that the same visit already counted. It is not stored on the listing, it is not readable by anyone browsing, and it is deleted automatically shortly after the window it was made for.
People here right now. While a page is open and on screen, it tells the server once a minute that it is still open. The server keeps the same kind of salted hash, with the time it last heard from it, to count how many people are on the site. Only that total is ever sent to a browser, and only when it is five or more. The record is deleted automatically a day or so after your last visit.
Analytics. Google Analytics and PostHog, and only after you say yes to the cookie banner. Say no, or say nothing, and neither script is ever fetched. They count pages and clicks. Neither is told who you are, and nothing records your screen. You can change your mind at any time from .
Errors. Crashes go to Sentry from the moment the page loads, without waiting for the banner. They set no cookie and carry no personal details, and gating them would mean the one failure we could never hear about is the banner itself failing to render. Nothing else goes with them: we do not record the page as you use it, and we do not time your visit.
Who else it passes through
Google (Firebase) hosts the site, the database and the sign-in. Google Analytics and PostHog receive the pages you open, once you have said yes; PostHog holds that in the EU. Sentry receives errors. Anthropic's Claude reads the text of a submission as part of reviewing it before publication — the submission only, not anything about the person browsing. Sponsors pay through Stripe, which handles the card details and receives only what a payment needs; we never see a card number, and Stripe is told nothing about anyone else browsing the site.
Builders' pictures. A builder who has not uploaded a photo is shown the picture on their X, GitHub or Gravatar account, so your browser asks those services for that one image. Nothing about you is sent with the request beyond what loading any image needs, and Gravatar is asked with a one-way hash of the builder's own address rather than the address itself. It happens for this reason only: drawing a face next to a name. Nobody is asked about you, no picture is used for anything else, and a builder who uploads their own photo, or has no such account, causes none of these requests.
Nothing here is sold, and none of it is used for advertising or shared with data brokers.
Getting rid of it
Delete your own listing at any time from Your listings; deleting is permanent. For your account, your waiting-list entry, or anything else you think we hold, email hello@whatareyoubuilding.ai and it will be removed.
One thing we cannot undo: a listing that was public may already have been copied by search engines, archives and anything else that read the public API while it was up.
Changes
This notice changes when the product does, and the date at the top is the last time it did.
See also the terms.