This policy explains what personal data Here's My AI collects, why, and what you can do about it. We've tried to keep it short and plain. We collect as little as we can: there's no advertising tracking, and our analytics don't use cookies or identify you.
Who we are
Here's My AI (heresmyai.com) is run by Dreamstar Digital Limited, a company registered in England and Wales (company number 13243395), registered office 5th Floor, 167-169 Great Portland Street, London, England, W1W 5PF.
We are the "controller" of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we offer the site to people in the European Union, the EU General Data Protection Regulation (EU GDPR) also applies.
If you have any questions about this policy or your data, email us at [email protected].
What we collect
If you just browse
You can read Here's My AI without an account. When you do:
- Analytics. We use Plausible Analytics to count visits and see which pages are popular. Plausible doesn't use cookies, doesn't store your IP address, and doesn't track you across sites or over time. It only gives us aggregated figures, such as page views, referring sites, and country and device type.
- Technical data. Like any website, our servers receive your IP address and browser details with each request. We use these to deliver pages and keep the site secure. They aren't used to profile you.
If you create an account
- Account details: your name, email address and password. We only store your password as a secure, one-way hash, never in a form we can read.
- Security settings: if you turn on two-factor authentication, we store its secret key in encrypted form along with your recovery codes. If you add a passkey, we store its public key and the name you give it. Your device keeps the private key; we never see it.
- Login sessions: while you're logged in, we record the IP address and browser of each session so we can keep your account secure. These records are removed when the session expires.
- Sign-up and latest login: we keep the IP address, browser and approximate country you signed up from and last logged in from, so we can spot and stop abuse such as spam accounts.
- Upvotes: which tools you've upvoted.
If you submit a tool
We store what you enter in the submission form: the tool's name, website, tagline, description, category, pricing, tags and screenshots. If you say you're the maker, we also store any promo offer and code. Your submission is linked to your account so you can track it on your dashboard.
When you submit a tool, we automatically fetch the tool website's icon (its favicon) to show next to the listing. This request goes to the tool's website, not to you.
Approved tools are public: their details and screenshots appear on Here's My AI for anyone to see. Your name and email address are not shown publicly with your submission.
If you report a tool
We store your report (the reason and any details you add) and link it to your account so our editors can review it and contact you if needed. The tool's maker isn't told who reported it.
If you sign up to the newsletter
You don't need an account to sign up. We store your email address, when you signed up and when you confirmed it. We first email you a link to confirm the address is yours, and we don't send you the newsletter unless you click it.
When we email you
We send emails that are needed to run your account, such as email verification and password resets. We only send the newsletter if you've signed up to it and confirmed your email address.
Why we use your data (lawful bases)
- To provide the service you asked for (contract): creating and running your account, logging you in, recording your upvotes, and reviewing and publishing your submissions.
- For our legitimate interests: keeping the site secure and preventing abuse (for example, fake accounts or vote manipulation), understanding how the site is used through privacy-friendly analytics, and improving Here's My AI. We've balanced these interests against your rights, and we use the least data we can.
- To meet legal obligations: for example, keeping records we're required to keep, or responding to lawful requests from authorities.
- With your consent: sending you our newsletter, if you've signed up and confirmed your email address. You can withdraw consent at any time by using the unsubscribe link in any newsletter we send, or by emailing [email protected].
Cookies and local storage
We only use cookies that are needed for the site to work, so we don't ask for cookie consent. We don't use advertising, tracking or analytics cookies.
| Name | What it's for | How long it lasts |
|---|---|---|
heresmyai-session |
Keeps you logged in and remembers your session as you move between pages | Until you've been inactive for 2 hours |
XSRF-TOKEN |
Protects forms against cross-site request forgery attacks | Until you've been inactive for 2 hours |
remember_web_… |
Keeps you logged in between visits, only if you tick "Remember me" when logging in | Until you log out (browsers keep it for up to 400 days) |
appearance |
Remembers whether you chose the light or dark theme | 1 year |
We also save your theme choice in your browser's local storage under the name appearance, so the page loads in the right theme. It never leaves your device.
You can block or delete cookies in your browser settings, but you won't be able to log in without the session and security cookies.
Links to other websites
Here's My AI links to the websites of the tools we list. When you follow one of these links, the tool's website will see that you came from Here's My AI. We add utm_source=heresmyai and utm_medium=referral to these links so makers can see visits we sent them. These parameters don't identify you.
Other websites have their own privacy policies, and we're not responsible for how they handle your data.
Who we share your data with
We don't sell your personal data, and we don't share it with advertisers.
We use a small number of trusted service providers (processors) who handle data for us under contract and only on our instructions:
- Hosting and storage: our servers, database and file storage (including screenshots) are hosted in the European Union.
- Email delivery: a provider that sends our account emails and the newsletter.
- Analytics: Plausible Analytics, an EU company that processes data in the EU (see above).
We may also share data if the law requires it, to protect the rights, safety or property of Here's My AI, our users or others, or as part of a sale or reorganisation of our business (in which case this policy would continue to apply to your data).
Where your data is stored
Your data is stored in the European Union. The UK recognises the EU as providing adequate protection for personal data, and the EU recognises the UK in the same way, so your data is protected to the same standard whether you're in the UK or the EU. If we ever use a provider that transfers data outside the UK and EU, we'll make sure it's protected by appropriate safeguards, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
How long we keep it
- Your account: for as long as you have an account. You can delete it at any time from Settings. Your profile, upvotes and security settings are then deleted.
- Tools you submitted: when you delete your account, submissions that are still in review or weren't approved are deleted, along with their screenshots. Approved tools stay listed, because they're part of the public directory, but they're no longer linked to you. Live listings are removed only in limited circumstances, set out under "Removing a listing" in our Terms of Use. If a listing includes your personal data, you can still ask us to remove that data.
- Login session records: until the session expires, usually after 2 hours of inactivity.
- Sign-up and latest login details: for as long as you have an account. Your latest login details are replaced each time you log in, and all of them are deleted with your account.
- Newsletter sign-ups: until you unsubscribe. If you don't confirm your email address within 7 days, your sign-up is deleted.
- Backups and server logs: kept for a limited period for security and recovery, then deleted or overwritten.
Your rights
You have the right to:
- access the personal data we hold about you;
- correct data that's wrong or incomplete (you can update your name and email in Settings);
- delete your data (you can delete your account in Settings);
- restrict or object to how we use your data, including where we rely on legitimate interests;
- data portability: receive your data in a common, machine-readable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email [email protected]. We'll respond within one month. We may need to confirm your identity first.
If you're unhappy with how we've handled your data, please tell us so we can try to put it right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, if you're in the EU, to the data protection authority in your country.
Children
Here's My AI is not intended for children. You must be at least 16 to create an account. If you believe a child has given us personal data, please contact us and we'll delete it.
Security
We protect your data with industry-standard measures, including encrypted connections (HTTPS), hashed passwords, optional two-factor authentication and passkeys, and restricted access to our systems. No system is completely secure, but we work to keep your data safe and will tell you and the regulator if a breach puts your data at risk, as the law requires.
Changes to this policy
We may update this policy from time to time. We'll change the "last updated" date at the top, and if the changes are significant we'll let account holders know by email or on the site.