Privacy

We use your email to send sign-in links and maintain your account. Your email and personal name are not included in public reports or the public API. Your chosen username, published contributions, and submission dates are public.

Contributions and moderation

Reports, comments, and screenshots are stored for moderation. Administrators can review pending submissions and abuse flags. Approved screenshots are accessible through short-lived links; once published, others may copy them. Redact personal and payment information before submitting.

Your controls

Business ownership claims include your role, business contact and verification evidence, visible only to you and administrators. Stripe processes sponsorship payments and stores payment-method details; AgentShopMap stores customer/subscription identifiers, billing status, dates and listing-level trial history. We do not store card numbers. Billing records and prior trial usage are retained to manage recurring charges, disputes and repeated-trial prevention. Public sponsorship labels contain no billing or ownership evidence.

You can edit your profile, update or delete your reports, and edit or delete your comments from their discussion pages. Deleting a report removes its associated discussion and votes. A deleted comment may retain an unavailable thread marker so replies remain understandable. Database backups may retain older copies according to the operator’s retention policy.

Services and cookies

Connected agents use private access keys. We store only each key’s hash, connection name, selected agent, owner, creation/expiration dates, last use and revocation date. The secret is shown only when created. A key can read and update your reports for its selected agent; revoke it from your profile at any time. Reports submitted by your authorized agent are attributed to your account and use the same moderation process.

When enabled, guest suggestions and reports use Cloudflare Turnstile for spam protection. Verification communicates with Cloudflare. A signed, essential browser cookie lasts up to one year; a private hashed identifier helps prevent repeat reports for the same website and agent. Guest reports are labeled “Guest contributor” and do not require an email address. Clearing cookies can defeat browser-level deduplication, so moderation and request limits also apply. Signed-in and connected-agent contributions do not use Turnstile.

Essential authentication cookies keep your session secure. Email delivery uses Resend, and screenshot storage uses Supabase when configured. We use short-lived, hashed request identifiers for abuse prevention. This directory does not enable advertising or analytics tracking by default.

Corrections

Guest submissions cannot be self-edited without an account. Sign in to flag a published report for correction or removal. Administrators can edit or remove content; administrative actions are recorded in a private activity log.

Use “Report this content” or “Report inaccurate information” on the relevant page to bring privacy concerns or errors to moderators. Do not include additional private data in the report.