Privacy policy

The short version

xconnect.best is a free directory of indie hackers on X. Your listing is public on purpose. Your email is not, and we never sell data or show ads.

What we get when you sign in with X

Sign-in runs through Supabase Auth with X's OAuth. With your permission, X shares your username, display name and profile picture. If your X account has an email address and you allow it, X shares that too. An email is not required to sign in.

• Your username, name and picture appear on your public profile. They are refreshed from X each time you sign in.
• If X shares your email, it stays in Supabase Auth, our sign-in provider. It is never shown on the site, never stored with your profile, and never used for marketing or newsletters.
• We never get your X password and cannot post on your behalf.

What is public

Everything you add to your listing: bio, niche, stage, what you are looking for, and your products with their links, taglines and launch dates. Anyone can see it, and search engines may index it. Profile pictures may load from X or unavatar.io.

Analytics

We use PostHog to count visits and clicks, but only after you choose "Allow" in the consent banner. Until then nothing is sent. It keeps its data in your browser's local storage, not cookies, and you can change your choice from the footer at any time.

AI writers

The bio and intro-post writers run on your own Prometey account, which you connect yourself. The text you ask about goes to Prometey under your account. xconnect.best stores no AI provider keys; the Prometey sign-in token stays in your browser until you disconnect.

Where data lives

Profiles and sign-in data are stored with Supabase. The site is served by Cloudflare Pages, which, like any host, sees standard request data such as IP addresses.

Hiding or deleting your data

• On your edit page you can hide your profile, delete products, or delete your profile and all its products at once.
• That leaves your sign-in account (username, and email if X shared one) in Supabase Auth. To have it deleted too, send a DM to @5thwye_ on X from the X account you signed in with.