1. Who we are
ShowMyProduct is run by @akbuilds_ on X. For anything about your data, DM us on X.
2. If you sign in with X
We get your X id, handle, display name and profile picture. We don’t get your password or email, we don’t keep your X access token after sign-in, and we never post for you. Your handle and picture appear on your poster and its page.
3. If you paste a poster
- What you enter and upload: title, line, link, category, and your image or video. These are public.
- The link to your X post, if you give it, and whether our checks found your post and your badge.
- A one-way hash of your IP address, to stop spam and repeat pasting. The IP itself isn’t stored.
- If you use the badge, we download your homepage now and then to check it’s still there.
4. Everyone who visits
To count visitors and give makers their stats, we record:
- A short visitor code: a one-way hash of your IP address and browser details. It lets us count unique visitors and who’s online without knowing who you are. Your IP address is never stored.
- Rough location: city, country and approximate coordinates, worked out by our host, Cloudflare, from your connection. Never your precise location.
- Device, system and browser (for example “Mobile · iOS · Safari”), read from your browser’s user agent.
- Where you came from (the site that linked you here) and which page you’re on.
- Which posters were on your screen, and which ones you clicked.
When you click through to a product, its maker sees that click in their stats: the time, your city and country, device and where you came from, shown under a made-up name and cartoon face. The live globe shows people online right now at city level, with the same made-up names and faces. Neither ever shows who you actually are.
We also count visits from bots and AI crawlers (for example Googlebot or GPTBot) by their published name, so makers can see who reads their page.
5. Cookies and storage
smp_session: keeps you signed in, for up to 30 days. Only set if you sign in.smp_oauth: used for up to 10 minutes while you sign in with X.smp_ref(in your browser’s session storage): remembers which site sent you here, until you close the tab.
No advertising, analytics or tracking cookies from anyone else.
6. How long we keep it
- Daily visitor codes: about 2 days.
- Who’s online: minutes.
- The live feed of clicks and new posters: 24 hours.
- Details of each click (city, device, source): 90 days.
- Totals (seen, clicks, clicks per country, per day): kept with the poster, because they’re part of its public record.
- Posters and their pages: until they’re taken down or removed (see the terms).
7. Who else is involved
- Cloudflare hosts the site and stores its database and uploads. It works out rough location from your connection.
- X handles sign-in, and shows your post under its own privacy policy.
- OpenFreeMap serves the map tiles your browser loads on the live globe and the stats map.
- DuckDuckGo’s icon service provides the small site icons in makers’ stats.
We don’t sell or rent anyone’s data, and we don’t share it for advertising.
8. Your choices
- Take your poster down at any time: open it on the wall and press “Take this poster down”.
- Sign out at any time (in the paste panel); that deletes the sign-in cookie.
- Ask us what we hold about your account, or to delete your posters, their pages and your account data: DM @akbuilds_ on X.
Visitor stats aren’t linked to a name or account, so we usually can’t pick out one visitor’s rows.
9. Children
ShowMyProduct isn’t meant for children under 13, and X accounts require you to be at least 13.
10. Changes
If what we collect changes, we’ll update this page first. The date at the top shows the latest version.