Effective: 1st May 2018
Last Updated: 6th March 2026
BuiltWith Pty Ltd acts as the data controller for personal data collected directly through the BuiltWith website and services.
This privacy policy applies to builtwith.com owned and operated by BuiltWith Pty Ltd ("BuiltWith","we","us","our"). This privacy policy describes how BuiltWith collects, uses, shares and secures personal information you provide. It also describes your choices regarding use, access and correction of your personal information.
BuiltWith Pty Ltd
ACN: 167 706 470
Registered in Australia
If you have any questions about this privacy policy or the handling of personal data, you may contact us at:
support@builtwith.com
TL;DR
We collect and store your email address if you consent to us doing that. We store it securely and have a few third parties that need to see that data for email deliverability, fraud prevention and payment processing. BuiltWith does not sell, rent, or trade your personal information.
DIRECT COLLECTION AND PROCESSING OF PERSONAL DATA
The primary personal data you provide directly to BuiltWith is your email address. It will be processed for the following purposes only:
a. To provide BuiltWith mandatory account status emails (password reset, email verification, welcome email etc...)
b. To identify you when you login to our website.
c. To receive marketing emails from us (optional consent opt-in).
We may also collect and store your name and address, if you provide it to us for invoicing purposes only.
The processing of data for the purpose above will be carried out via automated electronic means only.
LEGAL BASIS FOR PROCESSING
Where the General Data Protection Regulation (GDPR) applies, BuiltWith processes personal data under the following legal bases:
- Contractual necessity – to provide and operate the BuiltWith service (account access, billing, support).
- Legitimate interests – fraud prevention, service security, and abuse detection.
- Consent – marketing emails where users have explicitly opted in.
- Legal obligations – compliance with law enforcement or regulatory requirements.
DATA RETENTION
BuiltWith retains personal data only for as long as necessary to provide the service and comply with legal obligations.
- Account email addresses are retained while an account remains active.
- Billing records are retained as required for financial and tax compliance.
- IP logs used for fraud detection are retained for a limited short-term period.
INTERNATIONAL DATA TRANSFERS
BuiltWith Pty Ltd may transfer personal data to service providers or infrastructure located in countries outside the jurisdiction in which the data was originally collected. Where such transfers occur, BuiltWith ensures that appropriate safeguards are implemented to protect personal data in accordance with applicable privacy laws, including contractual protections with our service providers.
DATA MINIMIZATION
BuiltWith is designed to minimize the collection of personal data. We only collect personal information that is necessary to operate the BuiltWith service, including account identification, billing, and security functions. BuiltWith does not sell personal data and does not collect personal information beyond what is required to provide the service.
BuiltWith services are designed primarily to analyze website technologies and infrastructure rather than individuals.
SECURITY MONITORING AND ABUSE PREVENTION
BuiltWith operates automated systems to monitor usage of its services in order to detect fraud, abuse, unauthorized access, and other activities that may threaten the security or integrity of our systems. This monitoring may include analysis of IP addresses, authentication activity, and other technical signals generated through normal use of the service.
FAILURE TO PROVIDE CONSENT
The provision of consent is optional. However failure to provide consent will render it impossible to use BuiltWith internet services as we require your email to allow you to login and enable your account.
COOKIE POLICY
BuiltWith uses cookies for the following purposes:
- Authentication – to maintain user login sessions
- Security – to prevent automated abuse, bot activity, and scraping
- Affiliate tracking – to record referral relationships where applicable
| Cookie Name | Description |
|---|
| BWSSON | Encrypted cookie identifying your account. |
| BWSTATE | Current session identification cookie. |
| FAA | A potential affiliate commission cookie. |
If you choose to authenticate using Google, Google may set cookies. See their cookie policy here - https://policies.google.com/technologies/cookies
We embed maps from MapBox which may set cookies. See their cookie policy here - https://www.mapbox.com/legal/privacy
We use Google reCAPTCHA for fraud prevention which may collect your IP address for law enforcement requirements. See their privacy page here- https://policies.google.com/privacy.
We use Firebase to send alerts if you enable this feature. See their privacy page here - https://firebase.google.com/support/privacy
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block our cookies you will not be able to login to BuiltWith.
SERVICE PROVIDER THIRD PARTIES WHO MAY PROCESS YOUR DIRECT PERSONAL DATA
Our sharing of your personal data is very limited and a requirement for us to operate BuiltWith. All third parties are listed below.
The email addresses that provide consent will be processed by 3rd party email delivery service provider Postmark. See their privacy page here - https://postmarkapp.com/eu-privacy
If you sign up for payment with credit card and/or a Stripe supported payment method your personal details will be processed by Stripe, see their privacy policy here - https://stripe.com/au/privacy
If you sign up for payment with credit card and/or PayPal your personal details will be processed by Braintree/PayPal, see their privacy policy here - https://www.paypal.com/en/webapps/mpp/ua/privacy-full
If you sign up for payment with credit card you can optionally enable your account using our "know your customer" automated process provided by Persona, see their privacy policy here - https://withpersona.com/legal/privacy-policy
If you sign up for payments with PayPal or credit card your PII may be stored in our accounting system Xero, see their privacy policy here - https://www.xero.com/au/legal/privacy/
If you sign up for payments with Cryptocurrency through Coinbase your email may be processed by Coinbase, see their privacy policy here - https://www.coinbase.com/legal/privacy?locale=en
If you sign up for payments with Cryptocurrency through CoinPayments your email may be processed by CoinPayments, see their privacy policy here - https://www.coinpayments.net/help-privacy
In certain situations, BuiltWith Pty Ltd may be required to disclose personal data in response to lawful requests by public authorities, including to meet security or law enforcement requirements (see LAW ENFORCEMENT REQUESTS below). We may also disclose your personal information as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, when we believe there is a violation to our
terms, protect your safety or the safety of others, investigate fraud, or respond to a government request
DO NOT TRACK SIGNALS
BuiltWith does not track users across third-party websites and does not respond to browser 'Do Not Track' signals.
BuiltWith services are focused on analyzing publicly available website technologies rather than tracking individual browsing behavior.
🚔 LAW ENFORCEMENT REQUESTS
BuiltWith Pty Ltd will respond to lawful requests for information from law enforcement and government authorities.
Where required by law or where a valid legal request is presented, BuiltWith Pty Ltd may disclose customer account information, usage records, billing information, and other data in our possession to assist law enforcement investigations or legal proceedings.
BuiltWith Pty Ltd reviews all law enforcement requests to ensure they are legally valid and properly authorized before disclosing any information.
BuiltWith Pty Ltd prefers that requests be made through the Australian Federal Police (AFP) MLAT/MLA mechanism. Requests from recognized international law enforcement or government agencies may also be accepted directly, provided the requesting agency is a legitimate authority and not subject to applicable sanctions.
BuiltWith Pty Ltd may disclose relevant information to law enforcement authorities where legally required or where a valid legal request has been presented.
BuiltWith Pty Ltd will not notify or otherwise inform the affected customer or end user about the existence of a
law enforcement request where such notification is prohibited by law, restricted by the
requesting authority, or would interfere with an investigation.
Send law enforcement requests to support@builtwith.com.
INDIRECT COLLECTION OF PERSONAL DATA
We automatically collect your IP address through standard web server logs when you access the BuiltWith website. We collect this information for the purposes of detecting and preventing fraud and unauthorized access and maintaining the security of our systems.
We may derive approximate geolocation from your IP address to personalize the BuiltWith website experience, but we do not store this geolocation information.
CCPA
California residents may request disclosure of the categories and specific pieces of personal information we have collected about them. California residents may also request deletion of personal information we have collected, subject to certain legal exceptions under the California Consumer Privacy Act (CCPA).
We will not discriminate against individual California residents for exercising any of their rights under the CCPA.
SECURITY AND DATA CENTER LOCATION
BuiltWith Pty Ltd is PCI DSS as monitored by SecurityMetrics. BuiltWith data centers are ISO/IEC 27001 certified, SOC 1 Type II and SOC 2 Type II certified. Servers that process personal data are HSTS enabled, ensuring end-to-end encryption of your information.
Our mirror data center is located in Australia and is SOC 1 Type II, SOC 2 Type II, PCI DSS, LEED, ISO 14001, 22301, 27001, 50001, 9001 certified.
Our short term encrypted backups are stored at Dropbox, ISO 27018 certified data center. See their privacy policy here - https://www.dropbox.com/privacy
Our additional backups are encrypted backups stored at Backblaze, ISO 27001:2013 SOC-2 certified data center. See their privacy policy here - https://www.backblaze.com/company/privacy.html
Our additional backups are encrypted backups stored at Microsoft, ISO 27001, SOC 3 certified data center. See their privacy policy here - https://privacy.microsoft.com/en-gb/privacy
Our moated backups are encrypted backups stored at Digital Ocean, SOC 3 Type 3 certified data center. See their privacy policy here - https://www.digitalocean.com/legal/privacy-policy
Our data center is located in Canada.
Access to systems that store personal data is restricted to authorized BuiltWith personnel who require such access to operate and maintain the service.
Useful security documents are available at
builtwith.com/useful-forms. The latest CVE pen test results are available at
builtwith.com/useful-forms#cve.
DATA BREACH RESPONSE
BuiltWith maintains incident response procedures designed to identify, investigate, and respond to potential security incidents. In the event of a data breach affecting personal data, BuiltWith will notify affected individuals and relevant regulatory authorities where required by applicable law.
CHILDREN'S PRIVACY
BuiltWith services are not directed to individuals under the age of 16. BuiltWith does not knowingly collect personal information from children.
ACCESS TO YOUR INFORMATION
The personal data BuiltWith stores on you directly is your email address and short term IP logs for the purposes of fraud, security and access. You may also optionally provide us your address for billing invoice customization.
You may perform a SAR by contacting us directly at support@builtwith.com.
RIGHT TO ERASURE
You can delete your account via the BuiltWith Pro dashboard - https://builtwith.com/account
DATA SUBJECT RIGHTS
Where applicable privacy laws apply, individuals may have the following rights:
- Access to personal data we hold about them
- Correction of inaccurate personal data
- Request deletion of personal data
- Restrict or object to processing
- Data portability where applicable
Requests may be submitted to support@builtwith.com.
CHANGES TO THIS PRIVACY POLICY
We encourage you to periodically review this page for the latest information on our privacy practices.
PRIVACY QUESTIONS / FEEDBACK
If you have questions or concerns about BuiltWith’s Privacy Policy please contact us at support@builtwith.com
If you are located in the European Economic Area and believe your data protection rights have been violated, you may lodge a complaint with your local data protection supervisory authority.
