Privacy Policy

StableMRR runs StableMRR and is responsible for the personal data described here. Contact us at [email protected]. This policy covers the public directory, the submission form and API, and our crawler.

• Visitors: there are no visitor accounts. Our server keeps ordinary request logs (IP address, time, page, browser) for security and to keep the service running. We also measure how the site is used with Google Analytics, see Cookies and analytics. We do not use advertising cookies.
• People who submit a product: the domain, the way you proved control of it, the time, whether a person or an AI agent submitted it (and the agent name if it gave one), and your IP address for rate limiting and abuse prevention. We do not ask for your name or email to submit.
• Listings: we read the public pages of an approved product and store its name, logo, brand colour, category, a short summary, and its plans, prices and features. This is information about a business, not about a person. If a page names a person (for example a founder) we do not collect that for the directory.
• Newsletter: if you subscribe, we store your email address, the page you subscribed on and the time. See Newsletter.
• Messages: if you email [email protected], we keep the message and our reply so we can help you and show what we did.
• Staff: the few people who approve listings sign in with an account. Their session uses one cookie that is strictly necessary and is only set on sign in.

We use Google Analytics 4 to understand which pages help visitors, what they search for, which links they follow and where a submission is abandoned. It records page views, searches, clicks on listings and outbound links, how far a page is read, and the steps of the submit form. It sets its own cookies (such as _ga) and sends the data to Google. Google Analytics 4 does not log or store IP addresses.

• If you are in the EU, the UK or Switzerland, analytics cookies stay off until you choose Accept in the banner. If you choose Decline, or do nothing, no analytics cookies are set and Google receives only anonymous pings without identifiers.
• Elsewhere measurement starts without a banner. You can still opt out with the link below or a browser extension.
• You can change your choice at any time with Cookie settings in the footer, and you can delete cookies in your browser.
• We do not use advertising features, remarketing or Google Signals, and we do not link analytics to any account, because visitors have none.
• Staff are not measured. The admin pages are never measured.

Google acts as our processor for this data. See Google's how Google uses data page and the browser add-on to opt out of Google Analytics.

If you enter your email address in a newsletter form, we store it, together with the page you used and the date, to send you price changes, new listings and guides, about once or twice a month. We use it for nothing else, we do not sell it and we do not add you to any other list. The legal basis is your consent, which you give by subscribing.

• You can stop at any time on the unsubscribe page or by writing to [email protected]. We then stop writing to you and keep only the fact that the address unsubscribed, so we do not add it again by mistake.
• We keep subscribed addresses until you unsubscribe. Write to [email protected] if you want yours deleted completely.
• Newsletters are sent through an email service provider acting for us.

• to run the directory: verify domains, approve and publish listings, keep prices up to date;
• to protect the service from abuse, spam and attacks (our legitimate interest);
• to measure and improve the site with analytics (your consent where the law asks for it, otherwise our legitimate interest);
• to answer your messages and requests (our legitimate interest, or to carry out your request);
• to send the newsletter you asked for (your consent);
• to meet legal duties and to defend our rights.

We do not sell personal data and we do not use it for advertising.

We use a small number of service providers who process data for us:

• Hosting and network providers that run our servers and deliver the site.
• An AI language model provider. We send it text taken from the public pages of an approved product, to decide its category and write a summary. We do not send visitor or submitter data, and the text is business content.
• A proxy service that we use only when a website refuses our crawler directly, to fetch the same public page.
• Google Analytics (Google LLC and its group companies) for the measurement described above.
• Email (Gmail) for messages sent to or from [email protected].

We may also disclose data when the law requires it or to protect the service and its users. The listings themselves are public by design.

The crawler is called StableMRRBot. It only reads pages of listings that a person approved, obeys robots.txt, is slow and stops when a site says no. Details and how to block it are on the crawler page.

• Request logs: up to 90 days, unless needed longer to deal with abuse.
• Analytics data: for the retention period set in our Google Analytics account, 14 months at most. The cookies last up to 2 years unless you delete them.
• Submission records: while the listing exists and for a limited time after it is removed, so that its address can keep answering correctly.
• Emails: as long as needed to deal with the matter, and then up to two years.
• Listing data of a removed product: deleted, except the minimal record that it was removed.

The site is served over HTTPS, access to the admin is restricted and logged, and we keep the data we hold small. No system is perfectly secure; if you find a problem, write to [email protected] with the subject Security.

Depending on where you live you may have the right to access, correct, export or delete your data, to object to or restrict some processing, to withdraw consent, and to complain to your data protection authority. Write to [email protected] and we will answer within the time the law requires. We do not discriminate against anyone for using these rights. Your data may be processed in countries other than your own; where required we use safeguards such as standard contractual clauses.

If a listing contains information about you that you want corrected or removed, tell us the address of the page and we will act within 48 hours.

The directory is for business use and is not aimed at children under 16. We do not knowingly collect their data.

We will post updates here and change the date above. If we add advertising or accounts we will update this policy before we do so. See also the Terms of Service and the contact page.