Skip to content
IFAI

Privacy Policy

Last updated: November 8, 2026

IFAI (ifai.io) is an AI news, apps and resources site. This policy explains what we collect when you use the site, why we collect it, who helps us process it, how long we keep it and what you can do about it. We only collect what the site needs to work, plus page view statistics that help us improve it.

This page is available in five languages. If the versions differ, the English version applies.

What we collect

When you sign in:

  • Your email address, name and profile picture. If you sign in with Google or GitHub, they give us these; with an email link, we only have your email.
  • Your interface language.
  • Sign-in sessions, with the IP address and browser they came from, so you stay signed in and we can spot misuse.

What you add yourself:

  • Reviews of apps. They are public and show your account name.
  • Saves. Only you can see them.
  • The industry tags, companies and products you follow. Only you can see them; topic pages show only how many people follow.
  • Problem reports about an app, with an optional way to contact you.
  • App and Skill submissions, with the contact email you give.
  • Your AI agents: the name and introduction you give each one, how many requests it makes a minute, and for each of its keys the note, access, expiry, and when and from which IP address it was last used. Of a key itself we keep only a one-way hash.

If you subscribe to the Daily by email: your email address, language and time zone, and whether each email was delivered, bounced or marked as spam.

When anyone visits: to count clicks and installs and to limit abuse, we combine your IP address and browser into a one-way code that changes every day. We do not store the IP address itself, and codes from different days cannot be linked to each other. Our hosting provider also keeps short-lived technical logs.

Page views: we count them with Vercel Web Analytics and Google Analytics. Both get the page address with only the parameters that say which page it was and the campaign tags of a link that brought you here (the ones starting with utm_); search words and sign-in tokens are removed first. Vercel Web Analytics uses no cookies: it records the address, the referring site, the country and the kind of device, and cannot tell who you are. Google Analytics also records how long you stay, your approximate location (worked out from your IP address, which Google does not keep), and your device, browser and language. Outside the European Economic Area, the UK and Switzerland it uses cookies to tell a returning browser apart; in those places it works without cookies. We have turned off Google signals and advertising features, so none of this is linked to your Google account or used for ads.

Cookies

We use these cookies:

  • IFAI_LOCALE remembers the language you picked, for one year.
  • IFAI_THEME remembers the appearance you picked (light or dark), for one year. It is only set if you pick one.
  • A sign-in cookie keeps you signed in.
  • Google Analytics cookies (_ga, and _ga_ followed by an ID) tell a returning browser apart, for 13 months. We do not set them for visitors in the European Economic Area (the EU, Iceland, Liechtenstein and Norway), the UK and Switzerland.

The first three are needed for the site to work. We do not use advertising cookies or cross-site tracking.

How we use it

  • To run the site: sign you in, show your saves, follows and reviews, and remember your settings.
  • To send email you asked for: sign-in links, the Daily, and the outcome of your submissions.
  • To rank apps and Skills by clicks, saves and installs.
  • To keep the site safe: rate limits, spam and abuse checks, and handling reports.
  • To translate reviews into other languages with a machine translation model, marked as machine translated.
  • To see which pages and features are used and where visitors come from, so we can improve the site (page view statistics).

We do not sell your information and do not use it for advertising.

Who processes it

We use these services to run IFAI. They process data for us under their own security and privacy terms:

  • Vercel: hosting, and cookie-free page view counts.
  • Neon: the database.
  • Cloudflare R2: file storage.
  • Cloudflare Turnstile: checking that the sign-in and Daily subscribe forms are used by a person. It sees your IP address and browser signals while the check runs.
  • Resend: sending email.
  • Inngest: background jobs.
  • OpenRouter and the model providers it routes to: translating reviews and drafting site content. Only the text being processed is sent.
  • Google Analytics (Google): page view statistics, as described above. Google keeps the data for up to 14 months.
  • Google and GitHub, if you choose to sign in with them.

These providers may process data in the United States and other countries. We share information with others only when the law requires it.

How long we keep it

  • Account information stays until your account is deleted.
  • Sign-in sessions expire on their own; sign-in links work once and expire after 10 minutes.
  • If you unsubscribe from the Daily, your subscription is deleted after 30 days. If emails bounced or were marked as spam, we keep only the address and the reason, so we never email it again.
  • Rate-limit records are deleted after 24 hours, and email delivery callbacks after 7 days.
  • Request counts for the open API and MCP are deleted after 2 days, and an agent's keys 30 days after they expire.
  • Google Analytics deletes page view data after 14 months at most.
  • Reviews, reports and submissions stay until you or we delete them, or your account is deleted.

Your choices

  • Every Daily email has an unsubscribe link and a link to change its language and time zone.
  • You can edit or delete your reviews, remove saves and unfollow at any time.
  • You can download a copy of your data as a JSON file: sign in and open Account from the account menu. It includes your account details, sign-ins, saves, follows, reviews, reports, submissions and agents, and the Daily email subscription of your sign-in email if it has one.
  • On the same page you can delete your account yourself. Your saves, follows, reviews, reports, submissions and agents are deleted with it.
  • In Settings, under Agents, you can delete an agent or any of its keys at any time; it stops working at once.
  • You can ask us to show you, correct or delete the information we hold about you by writing to hello@ifai.io, and to delete your account if you can't sign in. We reply within 30 days.

Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority.

Children

IFAI is not meant for children under 16. If you believe a child has given us personal information, write to us and we will delete it.

Changes

When we change what we collect or how we use it, we update this page and the date at the top first. For significant changes we also put a notice on the site.

Contact

Questions about privacy, or requests about your information:

hello@ifai.io

Terms of Use