Your email

Privacy

BuyOnce publishes how many people want an app. It never publishes who they are.

1. What we store

   For each vote: your email address, a normalized form of it (used to dedupe votes, to cap emails per address, and to act on all of a person’s votes when they stop or delete), the app, the price you would pay once, whether you asked to be notified, a count of the confirmation emails we sent, hashed copies of the confirm and manage links (never the links themselves), and timestamps. For suggestions: the app name and website you typed. No email is stored with a suggestion.

2. Your IP address

   To limit abuse we count requests per IP address for one day, keyed by a hash of the address. We delete these counters after 2 days. They are never linked to your email or your vote.

3. Why we store it

   To count one confirmed vote per person and app, to confirm that the address is yours, and to send the notification you asked for. Nothing else.

4. Never sold or shared

   We never sell or share your email. Builders do not get a list. If a builder wants to reach people, they can only do it through a BuyOnce email that those people asked to receive.

5. Unconfirmed votes

   A vote counts only after you confirm it by email. We delete unconfirmed votes, with their emails, after 7 days.

6. How to delete your email

   Open the manage link in any email we sent you and choose Delete my email and votes. We delete your address and all your votes, so your votes no longer count. If you delete your email, we keep a hash of it only so we never email you again. You can also write to hi@buyonce.dev.

7. Confirmation and manage pages

   These pages load no analytics. We do not send their links to analytics or logs.