Privacy policy
Last updated 7 September 2026
Who runs MyBotList
MyBotList is operated by Tamas Juhasz. For privacy questions, account deletion or requests about your information, email tamas@urbsai.com.
Your account and Google sign-in
When you sign in through Google, we receive your Google account identifier, email address and basic profile information, such as your name and profile image. Supabase handles authentication and stores your account and session information. We use this information to identify you, keep you signed in and provide your saved library. We do not request access to Gmail messages, Google Drive files, contacts or calendars. Other sign-in providers may supply comparable account and profile information, including a username.
Your saved library
We store the bots you save and the information you add to My Bots, including notes, saved prompts, collections, favourites, personal ratings and setup results. These records are linked to your account. They are not public catalog reviews. Please avoid putting passwords or sensitive personal information in notes or saved prompts.
Site activity and diagnostics
We record when a bot's instructions are copied or its external link is opened, together with a browser identifier and, when available, your account identifier. This helps us count use and understand which listings are useful. Vercel hosts the site and processes request information, including network addresses. Sentry processes error reports and sampled performance diagnostics, which can include browser information, page addresses and technical context, to help us find faults.
Cookies and browser storage
Authentication uses cookies to maintain your session. The site also stores a random browser identifier in local storage to avoid counting repeated bot actions as separate uses. That identifier remains until browser storage is cleared. You can remove cookies and local storage through your browser settings; doing so may sign you out. These features are not used for personalised advertising.
Newsletter
If you subscribe, we send your email address to Resend to maintain the newsletter list and deliver updates. Signing in does not subscribe you. You can unsubscribe using the link in any newsletter. We retain an unsubscribe preference to avoid adding you back without permission. Signup also uses temporary hashed email and network-address counters to limit repeated requests; those counters expire after ten minutes and can clear sooner when the server restarts.
Why we use information
We process account and library information to provide the service you request. We rely on our legitimate interests in keeping the site secure, measuring use and resolving technical problems for proportionate operational records. Newsletter delivery relies on your consent, which you can withdraw at any time. We may also retain information where needed to meet a legal obligation or handle a legal claim.
Who receives information
Our service providers include Supabase for authentication and storage, Vercel for hosting, Sentry for diagnostics and Resend for newsletter subscriptions. Your chosen sign-in provider handles its own login process. We do not sell your personal information or use Google account information for advertising or training AI models. We may disclose information where legally required or necessary to investigate abuse or protect people's rights. Public bot instructions may be assessed by AI services; private account information and library notes are not inputs to those catalog assessments.
International processing
Our providers may process information outside your country, including in the United States and Europe. Where data protection law requires safeguards for a transfer, we rely on the relevant provider's contractual transfer safeguards, such as standard contractual clauses, or an applicable adequacy framework. Contact us for information about safeguards relevant to your data.
How long information is kept
Account and saved-library information is kept while your account remains open, unless you remove it or request deletion. Operational records are kept according to the time needed to investigate faults, protect the service and understand usage, together with the retention settings of our providers. Deletion may not immediately remove copies in backups or logs; those remain subject to their normal retention cycle. Limited records may be retained where required by law, to resolve a dispute or to honour an unsubscribe request.
Your choices and rights
You can edit or remove saved bots in My Bots. To request a copy, correction or deletion of account information, or to ask about restricting or objecting to processing, email tamas@urbsai.com. We may need to verify that the account belongs to you. Depending on your location, you may also have a right to data portability and to complain to your local data protection authority. Withdrawing newsletter consent does not affect earlier lawful processing.
Links to other services
Opening a bot in Grok or another external service takes you outside MyBotList. That service's privacy policy applies to information you provide there. MyBotList does not receive your conversations with those bots through the catalog link.
Updates
We will update this page when our practices change. If a change materially affects how we use your information, we will provide an appropriate notice before the new use takes effect.
UK users can contact the Information Commissioner's Office. For newsletter details, see newsletter privacy.