Privacy

Short and plain: what Proof of Traction processes, why, and who runs it. Last updated 25 October 2026.

Who runs this

With X: your X profile — numeric id, username, display name, avatar URL and follower count — as X returns it at each sign-in. Username, name and avatar are shown next to your project; the id ties your account to your projects.
With Google: only your Google account id (the "sub" Google gives us) is stored, nothing else — not your name, not your picture, and we never ask for your email. Nothing about your Google account is shown on the site.
Without an X account connected, your projects show the public name you choose in your dashboard (or "Maker without a linked X account") and the label "no verified X account".
Cookies: pot_session keeps you signed in and holds only a session reference; while a sign-in is under way, pot_x_state or pot_google_state (10 minutes) ties it to your browser. All essential; there are no others.
Your project — name, tagline, site address and what you submit — is public by design once approved.

Pageviews sent by our script from the maker's site go through our collector to our own, self-hosted Umami. The script sets no cookies and writes nothing to localStorage.
The visitor's IP address is used in transit to derive a daily-rotating anonymous session id (a hash of site, IP, browser and a daily salt) and the country. We do not store the raw address.
What is kept: Umami's standard pageview record — page, referrer, browser, device and country, with a timestamp and the derived session id — and the daily per-project totals we compute from it (visitors, visits, pageviews, source). No visitor is identifiable across days or sites.
Verification checks fetch the maker's homepage (and a few sitemap pages) daily to confirm the script is installed. We store the outcome and timestamp of each check and the site's icon, not the pages.

This site's own traffic is counted cookieless in two Umami instances run by the operator: the Bangerkit stats instance and Euklea (alpha.euklea.ai), the operator's SEO tool, which uses it to see search traffic per page. Nothing is sold or shared with advertisers.
The footer shows badges of launch platforms that list this site (Twelve Tools, Launch Llama, LaunchAF, Fazier, DanielLaunches). Your browser loads each badge image from that platform, which sees the request like any image load.

Hosting: Hetzner (Germany). DNS and tunnel: Cloudflare. Backups: Cloudflare R2 (EU), encrypted before upload.
Email: mail to [email protected] is received through Cloudflare Email Routing (forwarded to the operator's mailbox) and sent through Resend (EU region).
These providers process data on our behalf under their standard terms; none of them receives it for their own use.

Sealed weeks are kept indefinitely: they are the record this site exists for. Verification checks are forgotten after 120 days; an approval expires after 180 days unless renewed.
Maker accounts and sessions are kept while the account exists; a withdrawn project keeps only its sealed entries (struck through).
Access, correction, deletion: write to [email protected] from the account or email in question. Deleting an account removes the profile and session data; sealed public entries stay as published.
We never sell data, run ads, or profile anyone.

Questions about what a number means? How it works · Who's behind it