Privacy
Last updated 25 October 2026. This explains the information used to research products, handle requests and deliver paid services.
What we don't do
No analytics. No tracking pixels. No advertising cookies. No third-party scripts profiling you. You can browse the entire catalog without an account, and we don't know who you are unless you tell us. This isn't a privacy posture we adopted for a policy page — it's the same reason nobody here contacts you first.
What we collect, and only when you send it
Forms. If you apply as a power user, submit a product or request help, we receive your name, email and the details you send. Requests are emailed to Distro through Resend. Builder submissions can also be stored in Supabase as private, unaudited records for review.
Payments. Card details never reach our servers. Stripe processes the payment and we receive confirmation, your email and the agreed service details. Stripe stores customer and invoice records, including the scope and payment status. Distro uses those records to deliver the agreed work and handle refunds.
The research assistant. Questions you type at /research are sent to Anthropic's API to generate an answer. Product searches can also be sent to OpenAI to interpret the request and Context.dev to research product websites. Search results and product evidence may be cached. No account is required. These providers process requests under their own data policies.
Server logs. Our host keeps standard request logs (IP address, timestamp, page) for security and debugging, for a limited period.
Cookies
Distro uses an operator sign-in cookie for admin access and a cookie to remember your light or dark theme. Saved comparisons use local storage on your device. Your current search candidates can use session storage so filters keep the same products after a reload. You can remove these through your browser’s site-data settings. These are not advertising trackers.
Who processes your data
- Vercel — hosting and server logs
- Resend — sending email and holding contact lists
- Stripe — customer records, invoices and payment processing
- Supabase — private builder profiles and listing records
- OpenAI and Context.dev — interpreting searches and researching product websites
- Google — product favicons requested for product identification
- Anthropic — generating research-assistant answers
- Namecheap — forwarding mail sent to our addresses
Data may be processed outside your country, including in the United States. Tural Salahov, trading as flowrish, is the controller; see our legal notice.
Your rights
If you are in the EU or UK, you can ask for a copy of what we hold, ask us to correct or delete it, or object to how we use it. Email founder@distro.market and a human — not a ticketing system — will handle it. We handle deletion requests, including mailing-list removal, alongside any applicable obligations to retain billing records.