Legal

Privacy Policy

Last updated: March 29, 2026

LandingCrush ("LandingCrush", "we", "us", or "our") is operated by Taciturn Studios LLC. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit landingcrush.com and use our services. By using LandingCrush, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you sign in via Manus OAuth, we receive your name, email address, and a unique identifier. We store this to identify you across sessions and associate your votes, submissions, and badges with your account.

Submitted Content

If you submit a homepage for voting, we collect the URL, company name, industry, launch date, tech stack tags, description, and any uploaded screenshot images. This content is stored on our servers and may be displayed publicly.

Voting Activity

We record each vote you cast (crush or pass), the timestamp, your evaluation mode preference (roast, rate, or both), and any voting streak data. This data powers leaderboards, analytics, and gamification features.

Comments

Comments you post on homepage detail pages are stored and displayed publicly alongside your display name.

Email Subscriptions

If you subscribe to our weekly digest, we store your email address for the purpose of sending curated content. You may unsubscribe at any time via the link in any digest email.

Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and time spent. This data is used for security, analytics, and improving the service.

Chrome Extension Data

The Crush Rater Chrome extension reads the URL of the currently active browser tab solely to check whether that page exists in the LandingCrush database. No browsing history is recorded, stored, or transmitted beyond this single lookup. The extension stores your LandingCrush API key locally in Chrome's chrome.storage.local and uses it only to authenticate API requests to landingcrush.com. No data is sent to any third party.

WordPress Plugin Data

The Crush Rater WordPress plugin makes server-side requests from your WordPress installation to the LandingCrush public API (api/public/homepage) to retrieve crush rate data for display. Your WordPress site's server IP address is visible to our API in the same way as any other HTTP client. The plugin stores your LandingCrush API key in your WordPress database (wp_options) and transmits it only to the LandingCrush API over HTTPS. No visitor data from your WordPress site is collected or transmitted to LandingCrush.

API Keys

If you generate a LandingCrush API key via your Profile page, that key is stored in our database hashed with SHA-256. The plain-text key is shown to you only once at generation time. API keys are used to authenticate requests from the Chrome extension and WordPress plugin on your behalf.

2. How We Use Your Information

To operate and improve the LandingCrush platform
To display your votes, badges, and submitted homepages
To send you notifications about your submissions (vote milestones, AI critique completion)
To send the weekly digest email if you have subscribed
To detect and prevent fraud, abuse, and security incidents
To comply with legal obligations
To generate aggregated, anonymized analytics (e.g., industry voting trends)

3. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

Essential cookies: Session authentication cookies required for you to stay logged in. These cannot be disabled without breaking core functionality.

Preference cookies: We store your evaluation mode preference and GDPR consent choice in your browser's localStorage.

Analytics: We use self-hosted analytics to count page views and unique visitors. No personal data is shared with third-party analytics providers.

Advertising (Google AdSense): We display ads served by Google AdSense. Google may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising at google.com/settings/ads. See our Cookie Policy for full details.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following limited circumstances:

Service providers: We use Amazon Web Services (S3) for file storage and Resend for transactional email. These providers process data on our behalf under data processing agreements.
Taciturn Studios network: Aggregated, non-personal data about submitted homepages may be shared with sister sites in the Taciturn Studios network for cross-promotion purposes.
Legal requirements: We may disclose your information if required by law, court order, or to protect the rights, property, or safety of LandingCrush, our users, or the public.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Your Rights (GDPR / EU Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your account and associated personal data. You can initiate this from your Profile page or by contacting us.
Right to restriction: Request that we restrict processing of your data in certain circumstances.
Right to data portability: Request a machine-readable export of your data.
Right to object: Object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, use the data deletion tool on your Profile page or contact us at [email protected]. We will respond within 30 days.

6. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

7. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes. Anonymized voting data may be retained indefinitely for aggregate analytics.

8. Children's Privacy

LandingCrush is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Security

We implement industry-standard security measures including HTTPS encryption, secure session cookies (HttpOnly, SameSite), and access controls on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of LandingCrush after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, data requests, or to report a concern, please use our contact form or email us at [email protected].

Taciturn Studios LLC — operating LandingCrush at landingcrush.com