Privacy notice

Who we are

pomble is a community catalogue of public AI bots, run by mtb labs. For privacy requests, email helpmepls@pomblebot.com.

What we collect

If you submit a bot, suggest an edit, or claim a listing, we store the details you type, any images you upload, and a salted hash of your IP address. A name and contact address are optional on a new listing and required on a claim. Moderators can see them. They are not shown on the public listing.

If you write a review or report a problem, we store the display name, the text, and a salted hash of your IP address. Approved reviews are published. Reports stay private.

If you ask for a verified-creator edit link, we use the email address you type. A link is sent only when it matches the private address already stored for that listing.

If an agent suggests a bot, we store the bot URL, an optional note, and a hashed IP address. No account is created.

If you use the contact form, we store your name, email address, message, the reason you picked, an optional bot name or URL, and a salted hash of your IP address. It is kept so we can reply. It is not published.

Admin sign-in stores a session cookie for the operator. It lasts at most 12 hours.

Server logs may include an IP address and the page requested, so we can keep the site secure and fix faults. They follow the host's log rotation and are not used for advertising.

Why

To run the catalogue, review what people send, limit spam, and reply when you ask for an edit link, write via the contact form, or make a privacy request.

Google reCAPTCHA

When bot protection is switched on, the public submission, review, report, edit, claim, creator-email, and contact forms use Google reCAPTCHA v3. Google receives the connection data it needs to score that request. The Google Privacy Policy and Terms of Service apply. The check sets a cookie named _GRECAPTCHA on those forms. We do not use it for advertising. The check stays off until it is deliberately switched on.

Other services

The server fetches the public x.ai page for a bot link you submit, to check that it is a bot page. If email is configured, a mail provider delivers creator edit links to the address you asked us to use. The site is hosted on a server we control. Google Analytics is not used.

How long we keep it

Published listings stay up while they are published. A verified creator's email stays while that listing is verified, so an edit link can be sent. It is not shown on the public site.

Contact details on submissions marked rejected or spam: we propose to delete those contact details 90 days after the decision. That deletion is not running. Nothing already stored is removed automatically. The 90 days are subject to review before any deletion is turned on.

Other submission and moderation records are kept while the record exists. Hashed IP addresses stay with the submission or feedback they belong to. Admin sessions end after 12 hours.

Cookies

The public site does not set analytics or advertising cookies. The reCAPTCHA cookie is set only on protected forms, and only while that check is switched on. The admin cookie is set only after an admin signs in. A preview cookie is set only if the site is closed behind a preview passphrase.

Your rights

You can ask for a copy of your information, a correction, deletion, or restriction, or object to how it is used. You can also complain to the Information Commissioner's Office. Email helpmepls@pomblebot.com. We may need to keep a moderation record where a review or a takedown requires it.