Privacy policy

Last updated: 15 October 2026

Contact

The controller responsible for personal data on AIProjects.win is Radek Jankowski, operating from Poland. For privacy questions and requests, contact [email protected].

Account and project information

When you sign in with GitHub or Google, we store the provider name and your account identifier to recognise your account. We do not request your email address from these providers, store your provider password, or retain provider access tokens.

Your nickname, optional uploaded avatar, public profile and published project information are visible to other visitors. Project information includes descriptions, links, thumbnails, category and the AI tools you select. Please publish only information you want to make public.

You can optionally publish a bio and up to three profile links. You can edit or remove them in your profile settings.

Project pages may also show an optional build story, screenshot gallery and a link to a video demo.

We store votes with the voting account to prevent duplicates and support withdrawal. Public pages show vote totals, not lists of voters. Project reports and moderation records are available to authorised administrators for reviewing abuse.

Saved project lists are private to your account. Saving a project does not cast a vote.

If you email us, we use your contact address and message to handle your question or privacy request.

Why we use this information

We use account information to provide sign-in, profile management, project publication and voting. We use reports and limited technical request information to protect the service and investigate abuse. Project views and outgoing visits help provide usage counters and community rankings.

Legal bases

We process the account and project information needed to provide the service you request, including sign-in, profile management, publication and voting, on the basis of Article 6(1)(b) GDPR. Security, abuse prevention, moderation, handling enquiries and limited community activity statistics rely on our legitimate interests under Article 6(1)(f): operating a reliable service, protecting its users and providing useful discovery and rankings. You may object to processing based on legitimate interests.

You can browse public projects without an account. Provider identification is necessary if you choose to sign in; the required project fields are needed to publish a project. An uploaded avatar is optional. Automated project rankings order public content; we do not use automated decisions that produce legal or similarly significant effects on individuals.

Cookies and local storage

Essential session cookies keep you signed in and protect account actions. Sign-in expires after at most 30 days, or after 7 days without activity. Signing out ends the session in that browser.

Your browser also stores your light or dark theme preference. We do not use advertising cookies or a persistent analytics cookie for project statistics.

Your language preference is saved in a functional cookie for up to one year. Page addresses determine the displayed language.

Project activity

Project views and outgoing visits may be counted without signing in. Anonymous visits use a short-lived page token; we do not use browser fingerprinting or an IP address as the visitor's statistics identity. Repeat anonymous visits may count again, so totals do not represent unique people.

For signed-in visitors, pseudonymous daily identifiers prevent duplicate counts. Public statistics do not expose lists of visitors. Servers receive technical information, including IP addresses, to deliver requests and enforce security limits.

Retention

Account information, published content, votes and moderation records are retained while needed to provide the service, maintain attribution and handle abuse or privacy requests.

Detailed activity records and short-lived identifiers use an 8-day retention window. Daily activity aggregates use a 90-day window. Expired records are removed during routine requests and maintenance; total counters remain with the project.

Backups

Database and uploaded media backups are encrypted before upload to R2. We rotate three recovery copies: hourly, daily and weekly. Verified archives are also created before deployments and managed manually on our server for deployment recovery. Copies are used for recovery, rather than ordinary service operation; data removed from the active service can remain in a recovery archive until that copy is replaced or removed.

External services and links

GitHub and Google handle their own sign-in services under their respective GitHub privacy statement and Google privacy policy.

Project websites and repositories have their own privacy practices. Opening their links takes you to an external service.

The application runs on a server operated by the controller. Cloudflare provides the network proxy, security and delivery of this website, and stores encrypted backup archives in R2. We also use Cloudflare Web Analytics to measure page visits and performance. Its beacon does not use analytics cookies or fingerprinting to track visitors across websites; it is separate from the project's own view and outgoing-visit counters.

International processing

External services, including Cloudflare and the GitHub and Google sign-in services, may process information outside the European Economic Area. Cloudflare publishes a Data Processing Addendum and transfer safeguards, including standard contractual clauses for restricted transfers. You can contact us for information about the safeguards relevant to your request.

Cloudflare Data Processing Addendum

Your choices and requests

You can edit your nickname and avatar, update your projects, withdraw votes and sign out. Contact us to request access, correction, deletion, restriction, portability or to object to processing, as applicable under data protection law. We may need to verify ownership before handling an account request.

You can also complain to a competent data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO).