Privacy Policy

Who is responsible

Cometday, based in the Netherlands, is the controller of the personal data described here. Contact: hello@cometday.com.

What we collect

• Account data from sign-in: your email address, name, profile photo and a unique account ID. Passwords and sign-in codes are handled by our authentication provider and never stored by us.
• Profile data you choose to add: username, headline, bio, location and links, and your topic interests.
• Activity: products you launch, votes, comments, saves, follows, reminders, reports and claims.
• Usage counts for product pages: when a page is viewed or a visitor clicks through to a product, we store an event with a pseudonymous visitor fingerprint (a one-way hash of IP address and browser, salted and rotated daily, so it cannot be linked across days), the referring site and the time.
• Abuse prevention: with each vote we store a salted one-way hash of the network address, used to detect vote rings.
• Messages you send through the contact form.
• The Daily: if you sign up, your email address, when you signed up and when we last emailed you.
• Advertising bookings: what you booked and its status. Payment details are entered with our payment provider and never reach us.
• Sponsored placements: views and clicks are counted with the same pseudonymous daily visitor hash, once per visitor per day.

Why, and on what legal basis

• To provide the Service and your account (performance of a contract).
• To keep rankings fair, prevent fraud and secure the Service (legitimate interests).
• To show makers aggregated statistics about their pages (legitimate interests).
• To comply with legal obligations.

We do not sell personal data, use ad networks, or use advertising or cross-site tracking cookies. The only advertising on Cometday is placements booked by makers, which are shown to everyone the same way.

What is public

Your profile, the products you submit, your comments and the list of products you upvoted are public. Your email address is never shown.

Who processes data for us

• Clerk for sign-in and account security.
• Our hosting and database providers to run the Service and store its data.
• OpenAI, only when the submit page drafts a listing: we send the public text of the website you asked us to read. No account data is included.
• Resend to send The Daily, if you signed up for it.
• Stripe to take payments for advertising placements.

Product logos and images are fetched by our own server and served from cometday.com, so the product's website does not see your visit.

Some providers are located outside the European Economic Area. Where that is the case, transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

• Account, profile and activity: until you delete your account.
• View and click events: up to 24 months, then deleted or aggregated.
• Vote network hashes: as long as the vote exists.
• Contact messages: up to 24 months after the conversation ends.
• The Daily: until you unsubscribe; the address is then kept only as unsubscribed so we never email it again.
• Advertising bookings and invoices: as long as tax law requires (7 years in the Netherlands).
• Backups may keep data for a short additional period.

Your rights

You can access, correct, export or delete your data, object to processing based on legitimate interests, and withdraw consent. Most of this you can do yourself in Settings, including deleting your account. For anything else, email us. You can also lodge a complaint with a supervisory authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

Cookies

We only use cookies and local storage that are necessary for the Service to work. See the Cookie Policy.

Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

We update this policy when what we do changes, and announce material changes on the Service.