Privacy Policy

BuiltOnRails is run by Intellecta, Sydney, Australia. This describes what we actually hold, not what a template says we might.

What we collect

Because you gave it to us. Your email address, a username, and anything optional you fill in: name, bio, website, social handles, and how you want your profile card to look.

Because you connected an account. If you sign in with GitHub or X we store the numeric account id, the handle, and when you connected. GitHub connections also store an access token so we can read your public repository statistics. X sign-in requests your email address, which is the only way a new account can be created from it.

Because you used the site. Sign-in count and time, the IP address of your last sign-in and the city and country it resolves to, when you were last active, and a count of profile views. The IP is kept so you can spot a sign-in that was not you.

Because we send email. Which emails went to you and when, so you are not sent the same thing twice.

We do not collect payment details. We do not use advertising trackers or third-party analytics cookies.

What is public

Your username, profile, and any applications you list are public. They appear on the site, in the public API, and through the MCP server, which means AI agents can and do read them. Assume anything on your profile can be read by anyone and by any machine.

Your email address is never public and is never included in the API or the MCP responses.

Who else sees it

• Cloudflare sits in front of the site and sees requests. We read aggregate visit counts from it. No personal profile is sent to it by us.
• Shorttags receives counts of events such as a listing being submitted or approved. Counts and event names, not identities.
• Stripe handles sponsorship payments. Card details go to Stripe and never reach us.
• GitHub and X receive the authorisation request when you choose to connect an account, and return the details above.
• Our email provider delivers sign-in links and the emails you have opted into.

We do not sell personal information and we do not share it for advertising.

Email you can turn off

Product updates, community email and the newsletter are each a separate switch in your settings, and every email carries an unsubscribe link. Sign-in links are not marketing and cannot be turned off while your account exists, because they are how you get in.

How long we keep it

Account data stays until you delete the account. Sign-in location history is kept while the account is active. Delivery records are kept so we do not resend things.

Deleting your account

You can delete it from settings or by emailing us, and we will act on that. Applications you listed may stay in the public dataset because other people's stack comparisons depend on them, but they are detached from you and your personal details are removed. If you want a listing gone entirely, say so and we will remove it.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email us and we will do it. If you are in the EU or UK, the legal basis is your consent for marketing email and legitimate interest for running the site and keeping it secure.

Security

Traffic is encrypted in transit. There are no passwords to steal, because there are no passwords. That does mean your email account is the key to yours, so protect it.

If something goes wrong that affects you, we will tell you rather than hope you do not notice.

Children

The site is not intended for anyone under 16, and we do not knowingly hold their information.

Contact

Privacy questions and requests go to [email protected].