Last updated: March 5, 2026
WhichM ("we", "our", or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.
When you create an account, we collect your username, email address, and a securely hashed version of your password. We never store your password in plain text.
When you submit guides, benchmark data, or other content, we store that content along with your user ID to attribute it to your account.
We may collect non-personally identifiable usage data such as pages visited, features used, and general interaction patterns to improve the Service.
If you save Mac configurations through our builder tool, we store those configurations linked to your account so you can access them later.
We use your information to:
Your data is stored in a secure PostgreSQL database. Passwords are hashed using industry-standard bcrypt encryption before storage. We implement reasonable security measures to protect your personal information, but no method of transmission or storage is completely secure.
We use email to send transactional notifications related to your account activity, such as:
These are service-related communications and are not marketing emails. We do not send promotional emails.
We may use third-party services for analytics and email delivery. These services may collect anonymised usage data in accordance with their own privacy policies. We do not sell, trade, or otherwise share your personal information with third parties for marketing purposes.
The Service uses browser local storage to remember your preferences such as theme settings (dark/light mode). We may use cookies for session management and authentication. You can control cookie settings through your browser.
If you choose to request inventory for an unsupported country, we set an anonymous, HttpOnly voting cookie for up to one year only after you explicitly vote. It supports one request per browser cookie and country. We store the country, a non-reversible deduplication key and a timestamp—not your name, account, IP address or user agent. These are approximate cookie-based requests, not verified people; votes are not published or used for marketing. Dismissing the notice can set a separate preference cookie that remembers that country for seven days.
You have the right to:
To exercise any of these rights, please contact us through the Service's contact channels.
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
If you have any questions or concerns about this Privacy Policy, please reach out through the Service's contact channels.