Privacy

Short and plain: what Proof of Traction processes, why, and who runs it. Last updated 25 October 2026.

Who runs this

Your X profile — numeric id, username, display name, avatar URL and follower count — as X returns it on sign-in. Username, name and avatar are shown next to your project; the id ties your account to your projects.
One cookie, pot_session, keeps you signed in. It is essential and holds only a session reference; there are no other cookies.
Your project — name, tagline, site address and what you submit — is public by design once approved.

Pageviews sent by our script from the maker's site go through our collector to our own, self-hosted Umami. The script sets no cookies and writes nothing to localStorage.
The visitor's IP address is used in transit to derive a daily-rotating anonymous session id (a hash of site, IP, browser and a daily salt) and the country. We do not store the raw address.
What is kept: Umami's standard pageview record — page, referrer, browser, device and country, with a timestamp and the derived session id — and the daily per-project totals we compute from it (visitors, visits, pageviews, source). No visitor is identifiable across days or sites.
Verification checks fetch the maker's homepage (and a few sitemap pages) daily to confirm the script is installed. We store the outcome and timestamp of each check and the site's icon, not the pages.

This site's own traffic is counted the same way, cookieless, in the operator's Umami instance (the Bangerkit stats instance). Nothing is sold or shared with advertisers.

Hosting: Hetzner (Germany). DNS and tunnel: Cloudflare. Backups: Cloudflare R2 (EU), encrypted before upload.
Email: mail to [email protected] is received through Cloudflare Email Routing (forwarded to the operator's mailbox) and sent through Resend (EU region).
These providers process data on our behalf under their standard terms; none of them receives it for their own use.

Sealed weeks are kept indefinitely: they are the record this site exists for. Verification checks are forgotten after 120 days; an approval expires after 180 days unless renewed.
Maker accounts and sessions are kept while the account exists; a withdrawn project keeps only its sealed entries (struck through).
Access, correction, deletion: write to [email protected] from the X account or email in question. Deleting an account removes the profile and session data; sealed public entries stay as published.
We never sell data, run ads, or profile anyone.

Questions about what a number means? How it works · Who's behind it