A little discovery is on its way…
How Launchfarm collects, uses, stores and shares information.
Effective 5 November 2026
Amos Kipkorir in Kenya operates Launchfarm at www.launchfarm.store and is responsible for its handling of personal information. Send privacy questions and requests to hello@launchfarm.store.
Account information includes your email address, account identifier and the profile information you provide. If you sign in with Google, our authentication service receives the account details Google shares for sign-in, such as your email, name and profile image. Password authentication is handled by Supabase; Launchfarm does not expose your password to product founders.
We store product submissions, uploaded or imported logos and screenshots, website URLs, draft distribution copy, launch schedules, votes, reminder preferences and notifications. We also store moderation decisions, reports, account restriction records and administrative audit history. Support messages contain the information you choose to send us. Sanitized operational error records contain a route template, error category, identifier and timestamp; we do not include raw error messages, query strings, cookies or request headers in those records.
For published products, we record product-page views and outbound website clicks, timestamps, referring hostnames and supplied campaign labels. We derive a daily visitor key using an HMAC of the date, IP address and browser user agent. The key is pseudonymous, not a promise of anonymity. Raw IP addresses and user-agent strings are not stored in Launchfarm’s analytics event table; infrastructure providers may process them in operational logs.
Known bots and requests expressing Do Not Track or Global Privacy Control are excluded from these analytics events. Product owners can view and export traffic information for their own products, including source and campaign information and pseudonymous visitor keys. These events do not identify purchases or prove that a visitor is a unique person.
We use information to authenticate accounts, provide founder tools, review and publish submissions, schedule launches, deliver in-app reminders, measure product traffic, answer support requests, prevent misuse and investigate disputes. Processing supports the service you request, our legitimate interests in maintaining a secure discovery platform and any applicable legal obligations. Where consent is required, we will request it and provide a way to withdraw it.
Public product pages and maker portfolios can be viewed without an account and may be indexed by search engines. Do not include confidential information in content intended for publication. Your email is not displayed on your public maker profile unless you put it in public content yourself.
Supabase provides authentication, database and media storage. Vercel hosts the application. Google provides Google sign-in and Gemini text generation. When you request a distribution kit, selected product details are sent to Gemini to create the draft. When you request a website import, our server fetches the supplied public website and its assets. Do not send sensitive personal information through these tools.
Application email delivery is not currently enabled. If enabled, our configured email provider, Resend, will process recipient addresses and transactional email content. Paid checkout is not currently enabled and Launchfarm does not collect payment-card information. Any future payment provider and related data processing will be disclosed before checkout is enabled.
Authorized staff can access records needed for support, moderation and administration. We may disclose information where legally required or to investigate abuse and protect users. We do not sell personal information. Providers may process information outside Kenya, subject to their applicable terms and safeguards.
Authentication uses cookies to maintain your session. A browser storage preference remembers your selected color theme. Launchfarm’s product analytics are first-party server records rather than advertising tracking cookies. We use HTTPS, database access controls and request limits. For password sign-up and reset through Launchfarm, a server-side breach check sends only the first five characters of a SHA-1 password hash to Have I Been Pwned; the password, full hash and account email are not sent. No service can guarantee absolute security.
Account and product records are retained while needed to provide the service. Analytics events, notifications and expired reminders are retained for up to 90 days. Usage counters are retained for 30 days, request rate-limit buckets for two days and sanitized error events for 30 days, with hourly cleanup. Moderation and dispute records are retained while needed to investigate abuse, resolve disputes or meet legal obligations. Contact us to request access, correction, export, deletion, account closure or an explanation of retention. You can download account data and request permanent deletion from dashboard Settings after signing in. Other requests are handled through support after verifying account ownership; administrator account closure requires an ownership transfer first. Some records may need to be retained to meet legal obligations, resolve disputes or prevent abuse; we will explain relevant limits when responding. Backups and provider logs may persist under the providers’ retention processes after active records are removed.
You can edit your profile and editable product drafts in the dashboard, remove your launch reminders and stop using the service. Where applicable law provides rights to object, restrict processing, withdraw consent or complain to a data protection authority, those rights remain available. This policy will be updated when our processing changes.
Questions? hello@launchfarm.store