Legal
Privacy Policy
How this site handles your data, in plain language. The full revision history is at the bottom of this page.
Built with love by Shushant Lakhyani. Building bestproductivityresources.com
Effective date
Written for humans
Plain language, no tricks
Questions?
Email us
1. Who we are
Best Productivity Resources ("the site", "we", "us") is a curated directory of productivity tools, apps, courses, books and methods, operated by Shushant Lakhyani. This policy explains what information is collected when you use the site, why it is collected, how it is stored, and the choices you have.
2. Information we collect
We collect as little information as possible. The data we handle falls into these categories:
- Resource submissions. When you suggest a resource by messaging us on LinkedIn, we receive only the details you choose to share in that conversation, such as your name and the resource details. This information is used solely to review the submission and, where necessary, follow up with you.
- Contact messages. If you reach out through the contact page or by email, we receive your message and any contact details you include, used only to respond to your enquiry.
- Newsletter subscription. Newsletter sign-ups happen on Gumroad, not on this site. Gumroad stores the email address you enter and makes it available to us as the creator so we can send you updates. You can unsubscribe at any time using the link in any email, and Gumroad's privacy policy applies to the sign-up itself.
- Technical request data. Like every website, the site receives standard request information when your browser loads a page: IP address, browser and device type, the page requested, the referring page and the time. The site is hosted on Cloudflare's network, which processes this data to deliver pages, keep them fast and block attacks. We do not use it to identify or profile you, and it is kept by those providers under their own policies.
- Visit counts. We count visits with Cloudflare Web Analytics, a small script from Cloudflare that runs when a page loads. It records the page, the referring site, your country, your device type and browser, and page load speed. It sets no cookies, uses no local storage, does not fingerprint your device and does not track you across other websites, and we see only totals. Before 7 November 2026, our former host, Lovable, counted visits from the requests your browser made to load pages. We do not use visit counts to build personal profiles.
- Affiliate tracking. Our pages load the Universal Tracking Tag from Impact.com, an affiliate network. It tells Impact that a page was viewed, along with standard request details such as your IP address, browser and the referring page. It can turn some outbound links into Impact tracking links and set cookies on this site, so that a partner company can credit us if you sign up or buy after clicking. Impact handles this data under its own privacy policy. The script currently loads for every visitor and is not a choice in the cookie banner; you can block it or its cookies in your browser. It is not loaded in the embeddable widget.
- Upvotes. When you press Upvote on a tool, our database (Supabase) stores the tool, the week and a one-way code made from your IP address and browser details mixed with a secret key and the week. The code lets each person vote once per tool per week; your IP address itself is not stored, and the code cannot be turned back into it. Votes are deleted after 60 days, and only vote totals are ever shown.
- Browser-only tools. The PDF tools (merge, split, compress, convert, rotate, rearrange, extract pages, remove pages and protect), the calculators, the text and everyday utilities, the Personal Card Builder and the writing and ideas tools process the files, images, text and numbers you enter only inside your browser. That content is not uploaded, transmitted to us or stored on our servers. Temporary download data is discarded when you close or refresh the page. The "What should I write today" tool can keep your points and streak in your browser, but only if you allow preference saving.
3. What we do not collect
- No account registration is required, so we do not store passwords or profiles.
- No advertising cookies are used. The only tracking is the Impact.com affiliate script described above.
- We do not collect precise location data, device fingerprints or behavioral profiles.
- We do not receive or retain files and content processed by the browser-only tools.
- We make no automated decisions about you and do not build profiles for advertising.
- The site is not directed at children. India's Digital Personal Data Protection Act treats anyone under 18 as a child, so we do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian. If you are under 18, please ask a parent or guardian before subscribing or contacting us. If we learn that we hold a child's data without that consent, we delete it.
4. Cookies, local storage and your consent
The site uses no advertising cookies. The Impact.com affiliate script described in section 2 can set its own cookies and is not covered by the banner. On your first visit you are shown a cookie banner with two clearly separated categories, essential and preference saving, and nothing else beyond the essential category runs until you choose:
- Essential (always on). A single browser storage entry,
bpr-cookie-consent, records your cookie choice and its date so we do not ask again on every page. Without it the site cannot respect your decision. - Your Saved list (only if you use it). When you tap the heart on a resource, its page name is kept in your browser under
bpr-savedso you can find it later on the Saved page. It is never sent to us, and you can clear it on that page at any time. - Recently viewed (only with preference saving). If you allow the preferences category, the names and page addresses of the last three resource pages you opened are kept in your browser under
bpr-recent, so the homepage can offer "Continue where you left off" next to your saved count. It is never sent to us. Use the Clear button in that strip to delete it, and it is deleted automatically if preference saving is turned off. - Last visit (only with preference saving). If you allow the preferences category, the time of your current and previous visit is kept in your browser under
bpr-last-visit, so the homepage can show how many tools and articles were added since you were last here. It is never sent to us, and it is deleted automatically if preference saving is turned off. - Preferences saving (optional). Lets the site remember things for you in your browser. Today this is the "What should I write today" tool, which keeps your points and streak under the key
wsiw-today-state, and the Recently viewed list described above, underbpr-recent, the last visit time underbpr-last-visit, and settings for free tools such as the Pomodoro timer, underbpr:prefs:<tool>. This data never leaves your device, and nothing is saved unless you allow this category.
You can change or withdraw your choice at any time with the link, also available in the footer of every page. Clearing your browser storage resets the banner to its default state. The full list of storage keys, their purpose and their lifetime is in the Cookie Policy.
5. How we use your information
- To review, verify and publish resource submissions.
- To respond to questions, feedback or correction requests.
- To send the newsletter, through Gumroad, to subscribers who opted in.
- To understand aggregate traffic patterns and improve the directory.
- To keep the site secure and prevent abuse.
We do not sell, rent or trade your personal information to anyone, and we do not share it with third parties for their marketing purposes.
6. Third-party services and links
Listings link to external websites, tools and services. Once you leave this site, the destination's own privacy policy applies, and we are not responsible for their practices. Resource submissions are handled through LinkedIn direct messages, which are governed by LinkedIn's privacy policy. Visit totals come from Cloudflare Web Analytics, under Cloudflare's own terms.
The directory includes a featured section that highlights selected productivity tools. Links in that section may be sponsored or affiliate links. We only feature trustworthy productivity resources we genuinely recommend, and any compensation or referral relationship does not change which tools are included. Full details are in the Affiliate Disclosure.
The site also shows sponsored slots at the sides on desktop and as strips on mobile. Empty slots simply link to our payment page, and booked slots link to the sponsor's own website. Sponsored slots set no cookies, run no third-party ad script and collect no data about you on this site. Terms for sponsors are in the Sponsorship & Advertising Policy.
A few parts of the site load content from other companies' servers, which means those companies receive your IP address and browser details when the content loads, and their own privacy policies apply:
- Launch badges. The Product Hunt, ScrollLaunch, Peerlist and Uneed badge images are loaded from those services.
- Testimonials. The testimonial widget is provided by Senja and may load video players, such as YouTube, which can set their own cookies under their own domains. If you leave a testimonial through the Senja form, Senja stores what you submit, such as your name, words and any photo or video, and its own privacy policy applies.
Links to our products, newsletter and support pages go to Gumroad, and the payment page for sponsored slots goes to PayPal. We receive no personal data from these embeds and links beyond what you choose to give those services.
Ask AI buttons. Some pages offer buttons that open ChatGPT, Claude, Perplexity or Grok with a ready-made question about the page. Nothing is sent until you click, and the question then goes to that AI service under its own terms and privacy policy.
Outbound links. Links to listed resources include utm_source=bestproductivityresources and utm_medium=referral so the destination can see that the visit came from this site. These tags identify the site, not you. Some links are affiliate links and are labelled as such, and the Impact.com script may turn some links into Impact tracking links when you click; see the Affiliate Disclosure.
The Featured badge. Makers can show a "Featured on Best Productivity Resources" badge on their own websites. When a page shows the badge, the visitor's browser loads the image from our site, so our hosting providers receive the same technical request data described above, including the address of the page showing the badge. We do not use it to track individuals.
The Tool of the day widget. Other websites and Notion pages can embed our daily tool pick (see the widget page). The widget itself sets no cookies, loads no analytics and stores nothing in the browser; the pick is chosen from the date alone. Loading it sends our hosting providers the same technical request data described above, and Cloudflare may set its bot-protection cookie (__cf_bm), as it does on every page of this site.
The MCP server. Our free MCP server runs on your own computer. It has no analytics or telemetry and never sends us your questions; its only request to us is a download of the public catalogue (/resources.json), which our hosting providers handle like any other page request.
AI Use Cases pages. The list on AI Use Cases is stored with our database provider, Supabase. When you open these pages, your browser or our server reads the public list from Supabase, so Supabase receives the same technical request data described above, such as your IP address and browser details. These requests set no cookies, store nothing in your browser and send no personal information about you; the list itself holds no personal data.
7. Data retention and security
Submission and contact data is kept only as long as needed to handle your request and maintain accurate records of published resources. Upvote records are deleted after 60 days. Newsletter emails are held by Gumroad until you unsubscribe. We apply reasonable technical and organisational measures to protect the limited data we hold, though no method of transmission or storage on the internet is completely secure.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to or restrict certain processing. To use those rights, email us directly at shushant@bestproductivityresources.com from the address concerned so we can verify you. We acknowledge requests within 7 working days and resolve valid ones within 30 days.
- India. Under the Digital Personal Data Protection Act, 2023 you may ask for a summary of the personal data we process, ask us to correct or erase it, withdraw consent, and nominate another person to exercise these rights on your behalf if you die or become incapacitated. The Digital Personal Data Protection Rules, 2025 bring most of these duties into force in stages through May 2027; we already follow them.
- UK and EU. You may also ask for your data in a portable format and complain to your local data protection authority, such as the UK Information Commissioner's Office, if you think we have mishandled it.
- US states. Residents of states with privacy laws, such as California, may ask to know, correct or delete their personal information. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for making a request.
Grievances. If you are unhappy with how we handled your data or a request, write to the same address with the subject "Privacy grievance". We acknowledge grievances within 7 working days and aim to resolve them within 30 days. If you are still not satisfied, you may complain to the Data Protection Board of India once it is operating, or to the authority that applies where you live.
9. Legal bases for processing
Where the UK/EU GDPR or a comparable law applies to you, we rely on these legal bases:
- Consent for optional preference saving and newsletter emails. You can withdraw it at any time.
- Legitimate interests for responding to your messages, reviewing submissions, keeping the site secure and preventing abuse, including stopping repeat upvotes.
- Legal obligation where we must keep records or respond to a lawful request.
10. International transfers
The site is operated from India and hosted on infrastructure that may store or process data in other countries, including Cloudflare, Supabase, Gumroad, Senja and Impact.com. Where data leaves your region, we rely on the providers' own safeguards, such as standard contractual clauses. The amount of personal data involved is deliberately minimal.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected on this page with an updated revision date, and notable updates are also recorded in the site's update log.
12. Website builder and AI tooling
This website was built using Lovable, an AI powered website builder. Some parts of the design, code and content were created or assisted by AI and then reviewed by the operator before publication. Lovable's own terms and privacy practices apply to the platform and hosting services it provides.
13. Legal contact
Best Productivity Resources, operated by Shushant Lakhyani. All legal notices, privacy requests, correction requests, takedown notices and questions about these documents go to a single address so nothing gets lost.
- Subject line to use
- Privacy request - Best Productivity Resources
- What to include
- The exact page address or listing name your request relates to.
- A clear description of the request (access, correction, deletion, takedown).
- For rights requests, the email address you used with us so we can match the record.
- For takedowns, proof of ownership or authority to act on the owner's behalf.
- Response time
- We acknowledge legal and privacy emails within 7 working days and aim to resolve valid requests within 30 days. Governing jurisdiction: India.
For non-legal matters such as suggesting a resource or general feedback, use the contact page or reach out on LinkedIn via the submission page.
14. Revision history
Every material change to this document is listed here, newest first, so you can see exactly what changed and when.
9 November 2026
- Added the Impact.com affiliate tracking script (Universal Tracking Tag), which loads on our pages, can set cookies and can turn some outbound links into tracking links. Corrected the statements that the site uses no tracking, and added Impact.com to the international transfers list.
- Corrected the cookie banner description to two categories: essential and preference saving.
8 November 2026
- The site moved its hosting from Lovable to Cloudflare. Visits are now counted by Cloudflare Web Analytics, a cookieless script that stores nothing on your device; Lovable counted visits until 6 November 2026.
- Removed Lovable from the list of providers that process visitor data.
28 October 2026
- Added the Uneed badge to the list of launch badge images loaded from other services, which receive your IP address and browser details when the image loads.
26 October 2026
- Changed the contact email for privacy requests to shushant@bestproductivityresources.com.
- Made clear that testimonials left through the Senja form are stored by Senja, and added Senja to the international transfers list.
22 October 2026
- Added weekly upvotes: when you vote, Supabase stores the tool, the week and a one-way code made from your IP address and browser details with a secret key, never the IP itself. Records are deleted after 60 days. Legal basis: legitimate interests in stopping repeat votes.
- Added the optional last visit time (bpr-last-visit), kept in your browser only when you allow preference saving, so the homepage can show what was added since your previous visit.
20 October 2026
- Removed DataFast. The site now loads no analytics script and sets no analytics cookies or storage; our hosting provider, Lovable, counts visits and their sources from normal page requests and shows us only totals. Removed the analytics consent choice, the public traffic dashboard and DataFast from the international transfers list.
19 October 2026
- Analytics now load DataFast's cookieless script, so no analytics cookies are set. Described what it keeps instead: a session ID and the last page viewed in session storage, cleared when you close the tab, and a pseudonymous visit count made from a hash of your IP address and browser details with a key that changes every 24 hours. Any DataFast cookies left from the earlier script are deleted.
16 October 2026
- Named Supabase, our database provider, which serves the public AI Use Cases list: loading those pages sends Supabase standard request data such as your IP address, with no cookies or browser storage. Added Supabase to the international transfers list.
15 October 2026
- Free tool settings (bpr:prefs:<tool>, such as the Pomodoro timer lengths) are now kept in your browser only if you allow preference saving, and are listed in this policy.
14 October 2026
- Added the optional Recently viewed list (bpr-recent): with preference consent only, the last three resource pages you opened are kept in your browser for the homepage's "Continue where you left off" strip, never sent to us, and removable with its Clear button.
- Disclosed the __cf_bm bot-protection cookie that our hosting provider, Cloudflare, sets on every page (expires after 30 minutes of inactivity), including when the Tool of the day widget loads on another site.
- Described the embeddable Tool of the day widget (no analytics or storage of its own) and the free MCP server (runs on your computer, no telemetry, only downloads the public catalogue).
12 October 2026
- Added the Peerlist launch badge: its image loads from Peerlist, which receives your IP address and browser details, and sets no cookie on this site.
11 October 2026
- Covered the new calculators and text and everyday utilities: what you enter is processed only in your browser and never sent to us.
9 October 2026
- Added the optional Saved list: tools you tap the heart on are kept only in your own browser (bpr-saved) and never sent to us.
- Share buttons now open X, LinkedIn, WhatsApp or Reddit only when you tap them; nothing is loaded from those services before that.
- Added the RSS feed (/rss.xml), which contains only public article titles, links and summaries.
8 October 2026
- Newsletter sign-ups are now described accurately: Gumroad collects and stores subscriber emails.
- Added the technical request data our hosting provider (Lovable, served through Cloudflare) processes to deliver and protect the site.
- The site font is now hosted on our own server, so pages no longer contact Google Fonts.
- Disclosed third-party requests made by the Product Hunt and ScrollLaunch badges and video players inside the testimonial widget.
- Explained the Ask AI buttons, the referral tags added to outbound links and how the Featured badge works on other websites.
- Listed every browser-only tool and confirmed the writing tool keeps progress only with preference consent.
- Aligned the children's section with India's definition of a child (under 18) and noted the DPDP Rules, 2025 timeline.
1 October 2026
- Expanded Your rights to cover India's Digital Personal Data Protection Act, 2023, UK and EU complaint routes and US state privacy rights.
- Added a grievance process with a named contact, response window and escalation route.
11 September 2026
- Clarified that the PDF and personal card tools process selected files and entered content only in the visitor's browser.
- Confirmed that files used in these browser tools are not uploaded, transmitted or stored by the site.
8 September 2026
- Documented the embedded third-party content used on the site (testimonial widget, public analytics dashboard, payment and product pages).
- Described the sponsored slots and confirmed they set no cookies and collect no visitor data on this site.
- Linked the new Sponsorship & Advertising Policy.
4 September 2026
- Split the cookie and storage detail into a dedicated Cookie Policy and linked to it.
- Added references to the new Disclaimer, Affiliate Disclosure, Copyright and Accessibility documents.
- Clarified the legal bases we rely on for each type of processing.
- Added an international transfers section.
30 August 2026
- Added a disclosure that the website was built with AI using Lovable.
29 August 2026
- Resource submissions moved from an external form to LinkedIn direct messages.
- Removed the standalone privacy request page; data rights requests are now handled by email.
- Added a cookie consent banner with separate choices for analytics and preference saving.
- Documented the exact storage keys used for consent and site preferences.
- Added a dedicated legal contact section with an email address and response window.
- Added this revision history and a visible effective date.
28 August 2026
- Expanded the policy with detailed sections on collection, retention, security and user rights.
25 August 2026
- First published version at launch.