AppTierList › Privacy
Privacy
AppTierList sets no tracking cookies. Reading the site needs no account. It counts page views, searches and clicks so it knows which lists people use, and it keeps no IP address in those counts.
What a page view records
When you leave a page, your browser sends one short message: which page it was, the address of the page, the page that sent you here (the referrer), and which parts you opened, such as screenshots or the FAQ. Our server adds your country (from your network) and language (from your browser settings), and the kind of device (iPhone, iPad, Android, desktop).
To count unique visitors, the server keeps a short hash of your IP address, your browser and the UTC date, not the IP address itself. The hash is made with a secret key, so it cannot be turned back into your IP address, and it changes every day, so visits on different days are not linked.
What you type in the search box is sent to the server as you type, from the second letter, and counted with the apps it found.
A search that finds no list, or only near matches, is kept for up to 30 days with its words and a short hash of your network (your IP address, or for IPv6 its first half), so we can see which lists people miss. The hash is made with a secret key that changes every UTC day: it cannot be turned back into your IP address, and searches on different days are not linked.
A tap on an App Store or developer website link is counted with the app, where you came from and your country.
Automated clients, such as search engines and AI assistants, are counted by kind when they read a page. Calls to the API and the MCP server are counted with the list or app they asked about. A site that shows our badge is counted by its host name.
Where it goes
These counts are written to Cloudflare, which runs the site. They are not sold, and no advertising or tracking script from another company runs on the site.
Like any web server, ours keeps a short technical log of each request: the address asked for, the answer, how long it took and the first part of the browser's name. Cloudflare keeps these logs for at most seven days, and its own request records can include your IP address. They are used to find errors.
App icons and screenshots load straight from Apple's image servers, so Apple receives those requests, as it does when you browse the App Store.
If you claim an app or write to us
The claim form and the contact form keep the name, email and message you send, and the app for a claim. We use them only to answer you and to handle that claim. To limit spam we keep the same daily hash the visit counts use, never your IP address. Ask us and we delete it.
A developer who signs in gives an email address. Signing in sets one cookie, which keeps them signed in for 30 days; it is the only cookie the site sets, and only for developers who sign in. We send the sign-in and verification codes they ask for, notices about their claim and their badge, and a weekly summary of their app's numbers, which one link in every summary turns off. The email is kept with their account and any app they claim; ask us and we delete it.
A developer sees the numbers for the apps they own: totals of views, clicks, countries and sources. They are counts only, never a single visitor.
The forms that send mail (sign-in, claim and contact) are checked by Cloudflare Turnstile, which looks at the browser to tell people from bots. Cloudflare handles that check under its own privacy policy.
Contact
Questions or a request to delete what you sent: the contact form orcontact@apptierlist.com.