Privacy

This site sets no cookies, runs no analytics, and loads no third-party scripts. Not a reduced amount — none. You can confirm it in your browser's network tab, which is the only form of this promise worth making.

What that means concretely

• No cookies, no local storage, nothing kept in your browser between visits.
• No analytics on the page — no Google Analytics, no Plausible, no pixel, no beacon. What we know about traffic comes from the host's own totals (requests per page per day, and the browser name each request gives), which Cloudflare records for every site it serves. Nothing is added to the page or set in your browser for it.
• No fonts, scripts or images loaded from anyone else's server, so no third party learns you were here.
• No ad networks, no profiling, no sale of anything to anyone. The sponsored cards on the home page are plain links, with their logos and fonts served from this site; they track nothing and set nothing.

Two honest footnotes, because "none" is a strong word. The search and filter controls are JavaScript written for this site and served inline with the page — nothing is fetched from anywhere else, and it reports nothing anywhere. And Cloudflare, which serves the site, may show its own security check if it thinks a request is automated. That is the host protecting the site, it is the only code here we did not write, and it appears only in that case.

The two things that are collected

If you submit a program: the URL you send, and optionally a program name, any notes you type, and your email. That is the whole form. The email is optional and used for one thing: one email, through Resend, when your submission is decided. It is kept with the submission, never shown on the site and never added to a list. A submission is kept for a year, because the decision made on it is worth keeping that long.

Your IP address, briefly. The submit form is rate-limited, which needs to know that ten submissions came from the same place. The IP is stored for about an hour for that purpose and then expires. It is not logged anywhere else, not linked to anything, and not used to identify you.

If you buy the directory

The payment does not touch this site. Checkout is hosted by Dodo Payments, the merchant of record, and they collect what a payment needs — your email, and a billing country because tax depends on it. We never see your card details. What reaches us is the fact of a sale and the email address you gave. Their privacy policy covers that side.

Your email is used to send you the files, once. After you pay, the two files are emailed to you through Resend, an email-sending service; it is used for that one message and the address is not added to any list. Resend keeps a record of sent messages for about 30 days. We keep your email and payment id for 90 days alongside your download link, so that we can fix or re-send a download if something goes wrong, and then they expire.

Your agent key is stored as a one-way hash, with the date it was made and the date it expires, and nothing else — not your email, not your payment. It is deleted when it expires.

If you book a sponsored card

Payment works the same way, through Dodo Payments; we never see your card details. What reaches us is the card you built (name, line, colour, font, logo address, the page it links to), the payment id, and your email.

Your email is used to send the confirmation, and kept until 30 days after your week ends, then it expires. The card, its dates and the payment id are kept for a year as the receipt, without the email. Your logo and font are copied to this site while the card runs and for 30 days after.

Building a card sends the addresses you type to this site, which reads those pages to draft the card. Nothing is stored until you pay.

If your AI agent uses the directory through /mcp, what it asks is answered and not stored.

If you email us

We keep the email, because that is what having a conversation is. It is not added to a mailing list — there is no mailing list.

Hosting

The site is static files on Cloudflare Pages. Cloudflare handles the request and keeps short-lived operational logs for security and abuse prevention, as any host does. Nothing in those logs is read for any other purpose.

Your rights

You can ask what is held about you, ask for it deleted, or ask where it came from. Email support@affiliateprogramterms.com. Given the above, the honest answer will usually be that we hold nothing.