Privacy Policy

ResourcesList is a curated directory of third-party tools and resources. This policy explains in plain language what data we collect when you visit, why we need it, and what rights you have. Last updated September 25, 2026.

1. Overview

Who is responsible? The operator of this website (see operator details) decides how your data is handled and is your contact for privacy questions.

How do we collect your data? Two ways: you share it with us directly (signing in, filling in a form), or our systems record basic technical data automatically when you visit (such as browser type, pages viewed, and time of access) to keep the site running.

What do we use it for? Only to operate the site: accounts, form responses, security, error-free delivery, and — only if you accept the cookie banner — privacy-friendly analytics. We do not sell your data or build advertising profiles.

Your rights in short: you can ask what data we hold about you, have it corrected or deleted, withdraw consent at any time, and complain to your data protection authority. Details are in section 7.

2. Hosting

This site runs on Cloudflare Workers. When you visit, Cloudflare processes standard request data (such as your IP address) to deliver the pages. Because Cloudflare operates a global network, requests may be processed outside your country. Cloudflare only processes this data on our behalf to operate the site.

3. What we collect and why

• Account data. Sign-in is handled by WorkOS. When you sign in, we receive your email address and basic profile from WorkOS and keep you signed in with an encrypted session cookie. We need this to provide member features like submitting resources.
• Form submissions. If you join the waitlist, contact us, or submit a resource, we store what you send (name, email, message, resource details) so we can respond and review your submission.
• Security data. To protect our forms from abuse, we store recent request timestamps. These entries expire automatically after a short time.

4. Cookies

• Essential session cookie. Sign-in uses one encrypted session cookie to keep you signed in. If you disable cookies you will be signed out, but browsing the directory still works.
• Consent choice. Your Accept/Decline choice is stored locally on your device (rl-consent) so we remember it. This holds no personal data.
• Optional analytics (PostHog). Only if you click Accept, PostHog sets its own cookies/local storage (ph_*) to recognise repeat visits. Decline (or ignore the banner) and nothing is set — browsing works the same. Change your mind anytime via the “Cookies” button in the footer.

5. Analytics and affiliate tracking

We use PostHog for analytics, but only with your consent: no tracking runs until you click Accept in the cookie banner, and you can withdraw anytime via the “Cookies” button in the footer. When enabled, PostHog records page views and actions you take (such as searches, bookmark toggles, and form submissions) with browser metadata. Session replays and automatic click/form capture are turned off; we track only events we explicitly send. Data is processed by PostHog in the US (see PostHog’s privacy policy). If you never accept, you are never tracked.

We use no affiliate-tracking cookies. Our affiliate disclosure explains how affiliate links are marked.

6. How long we keep data

We keep your data only as long as needed: session data while you stay signed in, form submissions until your request is handled (or until you ask us to delete them), and security entries only until they expire automatically. If you request deletion and no legal retention duty applies, we delete.

7. Your rights

Within the applicable laws, you have the right to: know what personal data we store about you and where it came from; have incorrect data corrected; have your data deleted; restrict how we process it; receive your data in a portable format; withdraw any consent you gave (this does not affect anything done before withdrawal); and lodge a complaint with your supervisory authority. Contact us through the contact page for any of these.

8. Security

The site is served over encrypted HTTPS (TLS), so data you send us cannot easily be read by third parties in transit. Like any website, we cannot guarantee 100% protection — sending data over the internet always carries some residual risk.

9. Changes

This policy will be updated from time to time. Continued use of the website after a change indicates acceptance of the new terms. The date at the top reflects the latest version.

10. Contact

Privacy questions? Reach us through the contact page.