Privacy

• Your email address, so you can sign in and we can reach you.
• A display name, if you set one.
• The categories you pick when you sign in, and any change you make later.
• The products you save, like or mark not for me, and the products you click through to.
• If you are signed in: which products you open, roughly how long you stay on one (short, medium or long, not the seconds), which search results and categories you open, and how many times each product has been shown to you, so your feed stops repeating itself.
• If you set a password: the password, stored only as a one-way hash we cannot read back.
• If you pay for a Boost: your order and receipt details from our payment provider. We never see or store your card.

None of this is recorded for visitors who are not signed in. Recently viewed is kept in your own browser and never sent to us.

• To rank your feed around your interests.
• To keep you signed in.
• To send the digest, if you choose one. It is daily, weekly or off, set in Settings, and every one has a one-click unsubscribe.
• To answer you when you email us.

We do not profile you for advertising, and we run no advertising or analytics trackers.

• Supabase — database and sign-in.
• Vercel — hosting.
• Cloudflare R2 — image storage.
• Resend — sending email: sign-in links, digests, and the note we send a founder when we list their product.
• Zoho — our mailbox, when you email us.
• Lemon Squeezy — takes payment for a Boost as merchant of record, so it handles your card details and any sales tax under its own privacy policy.
• Have I Been Pwned — when you choose a password, we check whether it has appeared in a known data breach. Only the first five characters of a one-way hash of it leave your browser, never the password itself.
• Anthropic (Claude) — helps us write listings. It reads a product’s public pages and, for a founder, the business address we found. It never sees reader data.

We take screenshots of public product pages and store the image so a card can show you what a product looks like. We do not store the pages themselves. Each service has its own privacy policy.

Emerged lists products it finds on Hacker News, Reddit, GitHub and Product Hunt, and products their makers submit. If we listed yours, here is what we hold about you and why.

• Your product’s public details, in our own words. We say where we found it; we do not copy what that site wrote.
• A business email address, if one is published on your product’s own website or, for a GitHub project, your public profile. We record the page we found it on. We never guess an address or take one from another site.

We use that address to tell you your product is listed and how to claim the page. That is one email, and one reminder five days later only if the first went unopened. Every email has a one-click unsubscribe, and once you use it we never write to that address again. To change or remove your listing, use the claim link or contact us.

• Sign-in cookies, which are essential — without them you cannot stay signed in.
• Your light or dark theme choice, stored in your browser.
• Recently viewed products, stored in your browser.
• Whether you last signed in with a link or a password, stored in your browser, so the sign-in form opens the way you use it.

No third-party tracking or advertising cookies.

We do not sell, rent or trade your data. It reaches only the services above, or a law-enforcement request we are legally required to answer.

Your account and its saves stay until you delete them. Deleting your account removes your rows from the live database; copies can persist in encrypted backups for a short period before they age out.

• Everything travels over HTTPS.
• The database is encrypted at rest.
• Row-level security means one reader’s rows are unreadable to another.
• Passwords are stored only as one-way hashes, and new accounts must confirm their email address before they can sign in.

No system is perfectly secure, and we will not pretend otherwise.

You can see, correct, export and delete your data from Settings. Export gives you a JSON file; deletion is immediate and permanent.

Emerged is not intended for anyone under 13, and we do not knowingly collect their data.

If this policy changes we update this page and the date at the top.

Questions about any of this go to our contact page.