Privacy

How your data is handled

Last updated: 2026-08-21. This notice describes the running product. A competent legal review of operator identity, governing law and rights-request handling is still required before public growth campaigns.

What we process

We process the answers you submit, the generated verdict, basic account and session data, credit activity, optional feedback and any fields you explicitly choose to publish. If paid credits are enabled later, Mollie would process the payment and ShitOrShip would store transaction identifiers, status, amount and purchased credit package. Paid checkout is not offered on this launch. If you apply for a sponsor spot, we store the company, contact, website, preferred spot and message you provide.

Why we process it

Your answers are used to generate and privately store the verdict, operate your history and credits, prevent abuse, complete payments if they are enabled, and troubleshoot the service. Ideas stay private unless you actively create a public share. Sponsor application details are used only to review the fit, contact the applicant and arrange a placement if both sides agree. Public sponsor creatives show only the company name and headline the operator published.

AI processing

Your intake is sent to the configured AI provider through Cloudflare AI Gateway to generate a verdict. Provider request logging and prompt caching are disabled for those calls. Do not submit secrets, regulated data or personal information you do not have permission to use. See the AI disclaimer for the limits of generated output.

Cookies, analytics and consent

ShitOrShip does not set marketing cookies and does not run Cloudflare Web Analytics on this launch. Session cookies are used only to keep you signed in. Cloudflare Turnstile is a bot challenge, not an advertising tracker. Product and funnel events store a versioned event name, environment and a short same-day dedupe token. They do not store pitch text, email, cookies or share slugs. Cloudflare Analytics Engine keeps those aggregates for 3 months.

Storage, caching and access

Private API responses and account pages use no-store caching. The offline application shell does not cache private results or API responses. A public share contains only the verdict fields selected by its owner and can be revoked. Sponsor applications are not published and are available only to authorised operators.

Deletion and retention

You can permanently delete your product account from the account page. This revokes sessions and removes login data, verdicts, shares and feedback. Unused guest accounts are deleted after 7 days. Abandoned unpaid checkouts, if any are created later, are removed after 24 hours. Operational funnel counters are deleted after 7 UTC days. Sponsor applications are separate from product accounts and are removed when no longer needed for the application or resulting business relationship. Limited payment and credit audit rows stay pseudonymous after account deletion; the exact financial retention period for those rows still requires owner approval and is not invented here.

Your choices

You control whether a verdict is shared and can revoke a share or delete the underlying verdict. Account deletion is self-service. Access, correction, objection and export requests still need a verified privacy contact before public growth. Until that contact is published, use account deletion for your own product data.