The index is built to collect almost nothing. Browsing it collects nothing beyond what the web host logs. Submitting a server collects an email address. Requesting an audit collects the contact details needed to reply.
Media Yard LLC is the controller of personal data described here. Contact: support@leashkit.com.
The index uses no cookies, no analytics, no advertising and no third-party scripts. Like any website, its host records technical request data — IP address, time, page requested and browser type — to deliver and protect the site.
| What we collect | Your email address; the server's name, category and manifest; the URL where you published your ownership proof; and the date. |
| Why | To verify that you maintain the server, to publish the listing you asked for, and to contact you about that listing — including disputes and corrections. |
| Lawful basis | Where GDPR or UK GDPR applies: performing the listing you requested (Art. 6(1)(b)), and our legitimate interest in being able to reach a listing's maintainer about disputes (Art. 6(1)(f)). |
| What is published | The server's name, category, manifest, score and findings, and the domain or repository path you verified ownership from. If you verify from a personal domain, that domain will appear on your listing. Your email address is never published. |
| Who receives it | Media Yard LLC, and Netlify, Inc., which delivers submissions to us. A submission is deleted from Netlify, Inc.'s form storage when a moderator takes it in for review, so it is not kept there. We do not sell or share your details, and we do not use them for marketing. |
| How long we keep it | A rejected submission, including its email address, is deleted 90 days after rejection. An approved submission is kept while its listing is published, so that you can be reached about it, and is deleted within 30 days of the listing's removal. |
| What we collect | Your name, work email and company; what the request is for; what you want audited; and the date. |
| Why | To reply to your request and agree scope, price and timing for an audit. |
| Lawful basis | Where GDPR or UK GDPR applies: taking steps you asked for before a contract (Art. 6(1)(b)). |
| Who receives it | Media Yard LLC, and Netlify, Inc., which delivers the form to us. Nothing from it is published, sold or shared, and it is never used for marketing. |
| How long we keep it | If no audit follows, the request is deleted 12 months after our last exchange with you. If one does, it is kept with the engagement records. |
Email sent to support@leashkit.com is received by Resend, Inc. and forwarded to our inbox. It is kept only as long as needed to answer it, and is not used for anything else.
You can ask to access, correct or delete your personal data, or object to how it is used, by writing to support@leashkit.com. Deleting your email address does not by itself remove a published listing; ask for that too if you want it. If you are in the EU, UK or another jurisdiction with a data protection authority, you may complain to it.
Media Yard LLC may process your details outside the country you submit from, including in the United States.
If this notice changes, the new version is published here with its date.