Privacy policy

This policy follows Israel's Protection of Privacy Law, 5741-1981, including Amendment 13, and the Protection of Privacy (Data Security) Regulations, 5777-2017.

In short

• You can browse the whole directory without an account.
• There are no analytics tools, ad pixels or third-party trackers on the site. Fonts are served from our own server.
• We collect personal information only when you sign in, subscribe, write a review or a comment, submit a bot, or send us a request.
• Where we only need to tell visitors apart, we use a salted one-way hash of the IP address, not the address itself.
• We do not sell or rent personal information.

Who is responsible

GrokBotsHub is run by Vibecoding Ltd (ויבקודינג בע״מ), company no. 517319828, 61 Jabotinsky St, Petah Tikva, Israel. Vibecoding Ltd is responsible for the information collected on the site. For any privacy question or request: [email protected].

What we collect and why

• Your account. When you sign in we create an account with your email address and name. If you sign in with X or Google, we also store the account id that provider gives us, the sign-in tokens it returns and, if it sends one, the address of your profile picture. We use these to sign you in and to show your name next to what you post.
• Sign-in links. If you sign in by email, we send you a one-time link that expires after 15 minutes. Until it is used or expires, we store it with your email address.
• Sessions. While you are signed in, a session cookie keeps you signed in. On our side, the session record holds its expiry date, the IP address and the browser description (user agent) it was opened from. Our sign-in system keeps these to protect accounts. A session lasts up to 7 days and renews while you use the site. Signing out ends it.
• Newsletter and status alerts. Your email address, the list you joined (Hub Weekly or status alerts), the page you signed up on, when you confirmed, and a random code for the confirm and unsubscribe links. Sign-up is double opt-in: we send one confirmation email, and nothing else until you click its link. No box is pre-ticked.
• What you post. Reviews, ratings, replies, comments, stacks, saved bots, followed creators and guide progress are stored with your account. Reviews, replies, comments and public stacks are shown on the site with your account name.
• Bot submissions. The share link and the details you enter about the bot, the creator's name and X handle, and, if you give them, your email and notes. We use them to review the submission and to contact you about it.
• Reports and removal requests. Your message, the bot or page it is about and, if you give it, your email. We use them to fix the problem and to answer you.
• Quote requests and expert applications. What you write in the form: your project, apps, budget, deadline and email for a quote request; your profile details for an expert application. We use them to handle the request. A quote request sent from an expert's profile goes to that expert.
• Abuse protection. To limit how often forms, search and page-view counting can be used, we turn your IP address into a salted one-way hash and hold it only in the server's memory. It is written to our database in only two places: with an "Is Grok Bot down?" report, and with a "Was this helpful?" vote on a guide, so each person counts once.
• Counters. When you click "Add to Grok Bot", the link goes through our server, which adds one to the bot's count for that day and sends you on to x.ai. Bot page views are counted per day too, at most once per visitor per bot per hour. The counts hold no personal information.
• Server logs. Our web server (nginx) records each request: IP address, time, the address requested, the page you came from and your browser type. We use the logs for security and to fix errors. They are deleted after 14 days.
• Email you send us. It stays in our mailbox so we can answer and keep a record.

Do you have to give it

No law requires you to give us any information. You choose to. Without an email address we cannot sign you in, send the newsletter or answer you. You can use the directory without giving us anything.

Who receives it

• Cloudflare sits in front of the site to protect it from attacks and to deliver pages faster. All traffic passes through it, so it sees IP addresses and request details.
• Our hosting provider runs the server and the database that hold the information above.
• Our email delivery provider sends sign-in links, confirmations and newsletters.
• X or Google, only if you choose to sign in with them, under their own privacy policies.
• An expert receives a quote request you send from their profile.

Some of these providers process information outside Israel. Such transfers follow the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001. Beyond this list, we share information only when the law requires it, or to protect our rights in legal proceedings.

Links to x.ai and other sites take you to services we do not control. Their own privacy policies apply there.

Cookies and browser storage

• Session cookie: set only when you sign in, to keep you signed in. Signing in with X or Google also sets short-lived cookies that complete the sign-in.
• In your browser only (localStorage and sessionStorage, never sent to us): your accessibility settings, your progress on a fix checklist, and your Bot Finder answers until you close the tab.
• Cloudflare may set a technical cookie that tells people apart from automated traffic.

We set no advertising or analytics cookies. You can delete cookies and browser storage at any time in your browser settings.

Security

The site is served over HTTPS only. Where an IP address is enough to tell visitors apart, we store a salted hash instead of the address. Access to the database is limited to the people who run the site. No system is completely secure, but we take reasonable, accepted measures to protect your information.

How long we keep it

• Server logs: 14 days, then deleted automatically.
• Your account and what you posted: until you delete it or ask us to. Deleting an account deletes its reviews and comments.
• Sessions: until you sign out or the session expires.
• Newsletter: while you are subscribed. After you unsubscribe we keep your address marked as unsubscribed, so we never email it again by mistake. Ask us and we delete it completely.
• Submissions, reports, quote requests and emails: as long as we need them to handle the request and keep a record, and no longer than three years.

After that the information is deleted, unless the law requires us to keep it longer.

Your rights

• To see the information we hold about you (section 13 of the Protection of Privacy Law).
• To ask us to correct or delete information that is wrong, incomplete, unclear or out of date (section 14).
• To delete your account and what you posted.
• To unsubscribe from any email list at any time, with the link in the email or by writing to us (section 30A of the Communications Law).

For any request, write to [email protected]. We reply within 30 days. If you think your privacy was harmed, you can also contact Israel's Privacy Protection Authority.

Changes

If we change this policy, the new version appears on this page with its date. See also the terms of use and the accessibility statement.