CurlShip privacy & data

CurlShip is run by Marcin Dudek , an indie developer ( marcindudek.dev ).

Email — the only personal datum. Required so you can prove ownership of the listing and so we can contact you about it.

IP addresses used for rate limiting are held in memory only , in per-IP dictionaries, for at most one hour, and are never written to disk.

Product URL and scraped Open Graph fields (title, description, image).

Listing metadata — tier, badge status, status, timestamps, and (for paid tiers) a DodoPayments subscription id.

Contract — to create and keep your listing live, and to deliver a paid-tier subscription you bought.

Legitimate interest — to operate the directory, fight spam/abuse, and apply per-IP rate limits.

Active listings (and their email) stay for as long as the listing is active.

Both are kept for as long as the listing exists — they are what makes an unwanted change provable and reversible.

keeps the audit row so the change can be undone for 7 days.

In-memory rate-limit data expires within one hour.

Subscription records may be retained by the Merchant of Record for as long as tax and accounting rules require.

DodoPayments — Merchant of Record for paid tiers.

Erasing the stored email, and the audit rows with it, is a request to [email protected] .

Under GDPR (Arts. 15–21) you can request: access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest.

You also have the right to lodge a complaint with a supervisory authority in your country of residence.