Privacy Policy

Tiny Startups operates the website at tinystartups.com. When this policy says "we", "us", or "our", it refers to Tiny Startups. You can reach us at jr@tinystartups.com.

For full terms governing payments, see our Terms of Service.

Account data. When you sign in via Google or email, we receive your name, email address, and profile picture.

Submission data. Startup name, tagline, description, website URL, logo, and any other content you provide when submitting a listing.

Profile data. Optional bio, social links, and project URL you add to your profile.

Payment data. Payments are processed by Stripe. We do not store card numbers or bank details — only a record that a payment was made and which plan it was for.

Usage data. We collect click counts on listings and aggregate analytics via Pirsch (a privacy-friendly, cookie-free analytics tool). We do not use Google Analytics or any cross-site tracking.

IP addresses. Stored temporarily with upvotes to detect abuse. Not used for any other purpose.

• To operate the platform — displaying your submissions and profile.
• To send transactional emails (submission confirmations, approval/rejection notices, membership receipts). We do not send marketing emails.
• To detect and prevent fraud, spam, and vote manipulation.
• To process payments and manage subscriptions.

Where GDPR applies, we process your data on the basis of:

• Contract — to provide the service you've signed up for.
• Legitimate interests — to prevent abuse and improve the platform.
• Legal obligation — where required by law.

• Supabase — database and file storage (EU/US).
• Stripe — payment processing.
• Resend — transactional email delivery.
• Vercel / Railway — hosting and infrastructure.
• Pirsch — cookie-free analytics.

Each provider has its own privacy policy and data processing agreement. We share only the minimum data necessary for each service to function.

We use a single session cookie to keep you signed in. We do not use advertising cookies or third-party tracking cookies. Our analytics (Pirsch) are cookieless.

We keep your account and submission data for as long as your account is active. You may request deletion at any time (see section 10). Payment records are retained for 7 years as required by financial regulations.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Submission data (startup name, tagline, description, website, logo) is public by design once a listing is approved.

You have the right to access, correct, or delete your personal data. To exercise any of these rights, email jr@tinystartups.com and we'll respond within 30 days.

We use industry-standard security practices including HTTPS, hashed credentials, and access controls. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.

The Site is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy occasionally. The effective date at the top of this page will reflect any changes. For significant changes we'll notify you by email.

For any privacy-related questions or requests, contact us at jr@tinystartups.com.