AlternativeTo privacy & data

We are the data controller for the personal data described in this policy.

Your email address, your username, and — if you sign in with a password — a hashed version of that password.

Real name, bio, country of residence, website URL, profile picture, and links to services such as LinkedIn, Reddit, GitHub, YouTube and Instagram.

IP address, browser and device type, screen or window size, operating system, referring page, pages visited, time spent, and the path you took through the site.

Confirmation that the payment succeeded, the Stripe checkout session and payment identifiers, and the amount and currency.

If you email us or use a contact or report form, we keep that correspondence so we can handle your request.

To provide your account and the service — creating and authenticating your account, showing your profile, publishing the content you submit, and letting you manage your settings.

To process payments — taking payment for a priority review, a finished listing or a sponsorship, delivering what you paid for, and issuing receipts.

To show advertising — including personalised advertising where you have consented.

Account and profile data — until you delete your account or remove the information.

Payment and accounting records — seven years, as required by Swedish bookkeeping law, regardless of account deletion.

Server logs and security data — for a limited period, normally no more than 90 days, and longer only where needed to investigate a specific abuse or security incident.

Support correspondence — up to two years after the matter is closed.

Place of processing. Ireland and the United States.

we rely on the European Commission's Standard Contractual Clauses

the EU–US Data Privacy Framework for certified providers

on an adequacy decision where one exists

You can ask us to delete your data at any time by emailing hello@alternativeto.net

Access your data and get a copy of it.

Rectify data that is wrong or incomplete.

Erase your data

Restrict processing in certain circumstances, so that we only store the data.

Object to processing based on legitimate interests, on grounds relating to your situation.

Withdraw consent at any time, where processing is based on consent.

Portability — receive your data in a structured, commonly used, machine-readable format

However, the advertising cookies described above may qualify as a "sale" or "sharing" under California law.