Every app we have read
756 apps · 283 at highest risk · updated daily
101 of 756 apps
Adobeadobe.comYou own your files; Adobe skips gen-AI training except Stock, but collects broadly, brokers data.Productivity · read September 12, 2026Personalized ads
Anonupanonup.comSocial site: they keep posts public, delete in 30 days, no sale or targeted ads, but you indemnify them and accept as-is.Social · read September 14, 2026
Appleapple.comApple collects a lot, says it does not train foundation models on your private data, and can close accounts without notice.Platforms · read September 12, 2026Personalized ads
Archwikiarchlinux.orgA Linux project site that logs visits, keeps forum/wiki posts after you leave, and can close accounts without notice.Social · read September 14, 2026
Bandcampbandcamp.comThey collect account, purchase, and tracking data; don’t sell it; can close you anytime.Streaming · read September 14, 2026Personalized ads
Bitwardenbitwarden.comThey cannot read your vault; they keep account data, use Google Analytics, and can close you without notice.Security · read September 12, 2026Personalized ads
Bravebrave.comBrave says it does not keep browsing history or train Leo on chats, but ads, Rewards IDs, and strict legal terms still apply.Social · read September 14, 2026
CastingCallClubcastingcall.clubThey say they will not train AI on your uploads, but take a broad license, run ads, auto-renew, and can close you anytime.Productivity · read September 14, 2026Personalized ads
Classdojoclassdojo.comSchool-focused app: you own content, they say they never sell data, but AI, voice, and school records linger.Education · read September 14, 2026Personalized ads
Claudeanthropic.comChats can train Claude unless you turn that off in settings; safety-flagged chats still train, and paid plans auto-renew.AI apps · read September 24, 2026Personalized ads
Codebergcodeberg.orgA German non-profit git host: you keep your code, no ads, they can suspend you, and commit names may be kept forever.Developer tools · read September 14, 2026
crevadocrevado.comA 2018 portfolio site: you keep your files, they can close you anytime, no refunds, and they may keep some data after delete.Other · read September 14, 2026
Crowdincrowdin.comLocalization SaaS: they collect account, files, and tracking data, run ads, and you indemnify them under Estonian terms.Other · read September 14, 2026Personalized ads
Cryptomatorcryptomator.orgEncryption stays on your device; the site logs IPs briefly and Hub SaaS bills yearly with German-law terms.Developer tools · read September 14, 2026
Cursorcursor.comYou own your code; they say they do not train on it unless you opt in, but they can close you anytime and cap liability.AI apps · read September 12, 2026
Devhuntsupabase.coYou own your data; they won’t train AI on it without written consent, but ads tracking, and non-refundable auto-renew apply.Developer tools · read September 14, 2026Personalized ads
DeviantArtdeviantart.comThey collect account, art, messages, and device data; you keep copyright but they can close you without notice.Other · read September 14, 2026Personalized ads
Devincognition.aiChats can train models unless you pay and opt out; and they can close you anytime.AI apps · read September 15, 2026
Discogsdiscogs.comDiscogs collects browsing and inferred data for ads, takes a perpetual license on your posts.Streaming · read September 14, 2026Personalized ads
Discorddiscord.comDiscord collects lots of usage data, can train on public-ish posts unless you toggle it off.Messaging · read September 12, 2026Personalized ads
Discoursediscourse.orgThey say they do not train AI on customer data, but they use ads, brokers, and cookies, and hosting customers must indemnify them.Other · read September 14, 2026Personalized ads
discuss.elastic.coelastic.coThey collect account, device, and partner data, say they do not train generative AI on it, but take a broad license and can close accounts anytime.Developer tools · read September 14, 2026Personalized ads
Docker Hub (Organization)docker.comDocker says it does not train on your AI prompts, but uses ads trackers, and you indemnify them.Developer tools · read September 14, 2026Personalized ads
DonationPaydonationpay.orgThey collect donor, payment, and device data for nonprofits, share it with the charity and Stripe, and keep it as long as needed.Finance · read September 14, 2026
Dropboxdropbox.comYou keep your files; they scan them to run the service, keep data ~30 days after delete.Productivity · read September 12, 2026Personalized ads
FaceAppfaceapp.comPhotos are encrypted and deleted in 24–48 hours, you indemnify them, and they can cut access anytime.AI apps · read September 15, 2026Personalized ads
Filmot Channel Searchfilmot.comA public video search site that collects little user data, no ads tracking, but paid fees are non-refundable and the service is as-is.Other · read September 14, 2026
Fitonomyfitonomyapp.comFitness data and meal photos go to Google, Anthropic, and Meta ads unless you limit sharing and tracking.Other · read September 14, 2026Personalized ads
Fly Iofly.ioYou own your apps; they collect account and usage data, keep it until you delete, and auto-renew paid plans.Developer tools · read September 14, 2026Personalized ads
Folkfolk.comThey say they never train on your data, but they can take location, health, contacts, and photos if you connect them.AI assistants · read September 16, 2026Personalized ads
fotkafotka.comA photo-and-chat social site that shares your profile widely, uses ads and partners, and lets you delete most data in about 30 days.Social · read September 14, 2026Personalized ads
Geminigoogle.comChats train Google AI unless you turn Keep Activity off; humans can still read some chats for safety.AI apps · read September 12, 2026
GitHubgithub.comGitHub policies here let them train AI on your content by default, share with Microsoft, and close accounts without notice.Developer tools · read September 12, 2026Personalized ads
GitLabgitlab.comGitLab collects account, code, and device data; AI inputs are not trained without consent, but ads cookies and public posts linger.Developer tools · read September 12, 2026Personalized ads
Godotenginegodotengine.orgOpen-source engine site: accounts, IPs and public posts; store can close you anytime and takes a broad license on uploads.Gaming · read September 14, 2026
Granolagranola.aiMeeting notes and audio are stored; de-identified data trains models unless you turn that off in settings.AI apps · read September 16, 2026Personalized ads
HackAdvisorhackadvisor.ioCybersecurity labs collect account and usage data, share some with AI vendors, and can close you anytime; you can delete in settings.Developer tools · read September 14, 2026
Hashnodehashnode.comYou own your posts; AI is opt-in.Social · read September 14, 2026Personalized ads
Hex Pmhex.pmPublic packages stay forever; they can close you without notice; paid orgs auto-renew with no partial refunds.Developer tools · read September 14, 2026
hoo.behoo.beLink-in-bio pages are public; they collect usage data, can close you anytime, auto-renew with no refunds.Productivity · read September 14, 2026Personalized ads
Hostux.social (Mastodon Instance)hostux.socialA Mastodon server that posts publicly, keeps IPs up to a year, and lets operators read DMs.Social · read September 14, 2026
Hugging Facehuggingface.coYou own your content, they keep usage and account data, can close you anytime, and paid fees are non-refundable.AI apps · read September 12, 2026
ImageShackimageshack.comYou own your photos; they collect account, device, and logs, can ban you, and you indemnify them.Other · read September 14, 2026
iMGSRC.RUimgsrc.ruThey say they do not train on your images, you own them, but deletion is by email and liability is capped.Other · read September 14, 2026
InsaneJournalinsanejournal.comA journaling site that says it will not sell your data, but can delete your account and posts without notice and paid fees are non-refundable.Social · read September 14, 2026
Jitsijitsi.orgFree video meetings with temporary chat/recordings, no sale of data, as-is service, $10 liability cap, and class-action waiver.Social · read September 14, 2026
Keybasekeybase.ioEncrypted chats stay private, but public account proofs go on a blockchain forever.Social · read September 14, 2026
Komootkomoot.comOutdoor maps with GPS, ads trackers, a perpetual content license, and an optional AI guide that is not used to train models.Travel · read September 14, 2026Personalized ads
Leetcodeleetcode.comThey take a perpetual license on your posts, auto-renew with no refunds, and keep a 2017 privacy policy.Developer tools · read September 14, 2026
LibraryThinglibrarything.comThey catalog your books and reviews, say they won’t sell your identity, take a huge license on posts, and let you delete in settings.Other · read September 14, 2026Personalized ads
lichess.orglichess.orgFree chess site with no ads; they keep account and game data for years, can ban you without warning, and you indemnify them.Gaming · read September 14, 2026
Magnificmagnific.comThey collect a lot for ads, keep prompts for years, say they will not train on your images or voice, and cap liability.Other · read September 14, 2026Personalized ads
MapMyTracksmapmytracks.comYou own your tracks; AI insights are on by default but not used to train models; Google Analytics may personalize ads.Health · read September 14, 2026Personalized ads
Mastodon-C.IMc.imA Mastodon server that keeps posts public, shares them across the fediverse, and can suspend you without notice.Social · read September 14, 2026
Mastodon-meow.socialmeow.socialA Mastodon server that posts publicly, can read DMs, keeps IPs up to a year, and offers no paid AI features.Social · read September 14, 2026
Mastodon-Toot.Communitytoot.communityA Mastodon server that keeps public posts public, can read DMs, shares signup data with spam checkers.Social · read September 14, 2026
Mastodon.onlinemastodon.onlineA public social server: your profile and posts are public, operators can see DMs, and IPs are kept up to a year.Social · read September 14, 2026
Matrixmatrix.orgA federated chat server: your messages copy to other servers, deletion is limited, and they can cut access without notice.Social · read September 14, 2026
Memory Lolmemory.lolGitHub-style terms: they collect a lot, train AI unless you opt out in settings, can close you anytime, and you cover their legal costs.Social · read September 18, 2026Personalized ads
Minecraft Listminecraftlist.comThey keep votes and player names forever, can ban you without notice, and say continued use accepts new rules.Gaming · read September 14, 2026
Mistralmistral.aiThey collect chats and usage, train unless you opt out in settings, and commercial terms cap liability and bar refunds.AI apps · read September 12, 2026
Mozilladiscoursemozilla.orgFirefox keeps most browsing on-device, but New Tab ads, telemetry, and account terms still apply.Social · read September 14, 2026Personalized ads
n8nn8n.ioThey say they do not train AI on your data, but they take a broad license, cookies, indemnity, and keep content for months after you leave.AI apps · read September 15, 2026Personalized ads
Norton Family Assistantnorton.comThe policy says voice inputs may include audio or transcripts; Gen confirms they are not retained. Gen also confirms quality sampling is off, advertising does not use this data, and deleted data is wiped within 30 days.AI assistants · read September 25, 2026
numeo.ainumeo.aiYou keep your data; they process emails, GPS, and voice to run the platform, with auto-renew and you covering their legal costs.AI apps · read September 16, 2026
Obsidianobsidian.mdNotes stay on your device; paid Sync/Publish store data, fees are non-refundable, and they can cut access without notice.Education · read September 14, 2026Personalized ads
Ollieollie.aiOllie keeps your texts up to two years, sends them to AI vendors to reply.AI assistants · read September 25, 2026Personalized ads
OpenStreetMapopenstreetmap.orgMap edits and optional GPS traces are public and kept; email stays private; UK courts and a £1000 liability cap apply.Social · read September 14, 2026
osu!ppy.shosu! collects account, device, and score data, keeps some public forever, and you indemnify them under as-is terms.Gaming · read September 14, 2026
Pallypally.comPally says it will not train AI on your chats.AI assistants · read September 25, 2026
Pastebinpastebin.comYou own your pastes, can delete in 30 days, but ads track you, sales are final, and they can close you anytime.Developer tools · read September 14, 2026Personalized ads
PCPartPickerpcpartpicker.comThey collect email, IP, and usage data, say they do not sell or target ads.Developer tools · read September 14, 2026
Peerpushpeerpush.comYou keep your content, they keep published listings forever, share with providers, and paid boosts are mostly non-refundable.Social · read September 14, 2026
pixelfed.socialpixelfed.socialA photo social server that posts public content widely, keeps IPs, lets operators read DMs, and offers account deletion.Social · read September 14, 2026
Polarstepspolarsteps.comTravel tracking with optional location and contacts; they say they do not train AI on your data, but Plus auto-renews with limited refunds.Other · read September 14, 2026
Poll Everywherepollev.comPolling app that sends AI uploads to Google, does not train on them, can close accounts and keep fees, and you indemnify them.Developer tools · read September 14, 2026Personalized ads
postcrossingpostcrossing.comThey need your real postal address to swap postcards, show ads via Google, and can close accounts without warning.Social · read September 14, 2026Personalized ads
Postmanpostman.comThey collect account, content, and device data, share tracking with ad partners, auto-renew paid plans with no refunds, and you indemnify them.Developer tools · read September 14, 2026Personalized ads
Pravda.mepravda.meA language site that collects account and usage data, says it does not sell data, and can change terms by continued use.Social · read September 14, 2026
Privacy Guidesprivacyguides.netA privacy-focused forum: they don’t sell data, you can delete in settings.Developer tools · read September 14, 2026
prv.plprv.plHosting with email-only accounts, zero-logs claims, court in Slovakia, you indemnify them, and prices can change anytime.Developer tools · read September 14, 2026
Px500500px.comPhoto site that collects device and location data, licenses your images broadly, auto-renews paid plans.Other · read September 14, 2026Personalized ads
Python Discusspython.orgPSF collects usage and account data, shares it with vendors, lets you cancel in settings, and limits its liability.Developer tools · read September 14, 2026
Racketdiscourse.groupForum posts stay with the community; CDCK says no AI training, but ads, brokers, $50 liability cap.Developer tools · read September 14, 2026Personalized ads
Raddle.meraddle.meA small forum that collects little data, does not sell it, and deletes accounts on request—but the rules are old and thin.Social · read September 14, 2026
Refsheetrefsheet.netThey collect account info, IP, and analytics; you can delete your account, but terms can change without notice.Other · read September 14, 2026Personalized ads
RubyGems.orgrubygems.orgYou keep your gems, but they get a perpetual license to host them, and they can close your account without notice.Developer tools · read September 14, 2026
SmashRunsmashrun.comThey keep run data until you deactivate (purged in 24 hours), do not sell it.Health · read September 14, 2026Personalized ads
Start Mestart.meBookmark pages with optional AI; they say they don’t sell data, but free users get ad tracking and you indemnify them.Other · read September 14, 2026Personalized ads
Theforemantheforeman.orgA project site that logs IPs briefly, shares hosting with GitHub/YouTube, and lets you ask to erase most personal data.Developer tools · read September 14, 2026
Threejsthreejs.orgA resources shop that keeps emails and 10-year order records, shares only with processors, and does not sell your data.Other · read September 14, 2026
tl;dvtldv.ioThey record meetings, say they do not train AI on your content, and keep paid recordings until you delete the account.AI apps · read September 15, 2026
TradingViewtradingview.comCharts and chats stay; AI prompts go to third-party models; ads track you.Finance · read September 14, 2026Personalized ads
VIEWBUGviewbug.comYou keep photo ownership and they say they won’t train AI on your work, but ads cookies, auto-renew, and indemnity still apply.Other · read September 14, 2026Personalized ads
Voices.comvoices.comVoice talent and clients get a marketplace that takes a perpetual content license, tracks ads, and only builds AI voices with written consent.Productivity · read September 14, 2026Personalized ads
Warpcastwarpcast.comNeynar collects account, device, and public photos, uses them for ads, and deletion is by email only.Social · read September 14, 2026Personalized ads
Weblateweblate.orgWeblate collects account, payment, and log data, shares it with processors, auto-renews with no refunds.Other · read September 14, 2026
WhatsAppwhatsapp.comChats stay end-to-end encrypted, but they still collect lots of account, device, and contact data and share it with Meta.Messaging · read September 22, 2026
Wikipediawikipedia.orgEdits are public forever; they collect little personal data, do not sell it, and keep most private logs about 90 days.Education · read September 12, 2026
Writesonicwritesonic.comThey say they do not train models on your content; you own outputs, but ads cookies, auto-renew, and you indemnify them.AI apps · read September 15, 2026Personalized ads
Zoomzoom.comZoom says it does not train AI on your meetings, but takes a broad license, ads cookies, and auto-renewing fees.Messaging · read September 24, 2026Personalized ads