Privacy policy

Last updated 9 November 2026

John Gregoriadis, a sole trader in New Zealand trading as Shipyard runs Shipyard and is responsible for the personal information it holds. Questions, requests and complaints go to [email protected].

What we collect

• Your account: your email address, name if you give one, your time zone, and the workspaces you belong to.
• What you add: listings, board settings, the apps' pages you ask us to link, and what you mark on the board.
• Sessions: a sign-in cookie, and the IP address and browser of each session, to keep your account secure.
• Public posts: threads and replies from public sites (such as Reddit, Hacker News and Bluesky) that the board reads, including the usernames shown with them.
• Clicks: when someone opens a tagged link from a post, we count it against the card. We don't record who clicked.
• Billing: Stripe holds your card details. We keep your Stripe customer reference and subscription status.
• Makers we list: when we list an app we found, we may email its maker once at an address published for that app. We keep a one-way hash of that address, so it is never emailed again, and the page where we found it.
• Analytics: Google Analytics 4 uses cookies to tell us how pages are used. Ad features are off.

How we use it

To run your account and boards, send the emails you've asked for (sign-in codes, invites, alerts and digests, which you can turn off in Account), take payment, keep Shipyard secure, and improve it. We don't sell personal information or use it for advertising.

Who we share it with

These services process information for us, mostly in the United States:

• Railway, which hosts the app and database
• Anthropic, whose AI models read listings and public threads to score them and draft replies
• Resend, which sends our email
• Stripe, which takes payments
• Google, for analytics, and for reading your Google Analytics if you connect it
• Apify, which fetches public posts from some sites

They may only use it to provide their service to us. We'll also disclose information where the law requires it.

How long we keep it

For as long as your account is open, then deleted within 90 days of closing it, except what we must keep for tax and accounting. The record that an address was emailed is kept so it is never emailed again.

Your rights

You can ask to see or correct the personal information we hold about you, or ask us to delete it, by writing to [email protected]. If you're not happy with our answer, you can complain to New Zealand's Privacy Commissioner.

Changes

We'll update this page when what we do changes, and email you about material changes.