Privacy notice

Updated 20 October 2026.

Browse and read the sample

The public research and sample do not require an account or email. Vercel hosts the site and may process request information to serve and secure it. Google Fonts supplies the site’s fonts. Linked third-party websites have their own privacy practices.

Purchases, when available

Razorpay processes your payment details. What to Build uses your delivery email, order and payment reference, product and payment status to verify the purchase and provide support. We do not collect card details or payment passwords. Resend sends transactional delivery and recovery emails when configured.

Download access

Opening a valid private download link sets a one-hour, HttpOnly cookie that is used only for protected downloads. Payment status is rechecked before files are served. Do not share your private link.

Optional launch updates

Online signup, when enabled, asks for consent and email confirmation. A confirmed address is stored for up to 180 days for a starter-kit launch update. You can also request an update by emailing us. The separate weekly SaaS brief requires its own consent and confirmation; a kit launch request never opts you into it. Ask hello@what2build.com to remove your request.

Weekly research email and shortlist

Weekly email is available only when the delivery service is configured. It requires a separate double opt-in and includes an unsubscribe link. Confirmed records expire after 180 days unless you renew consent. Unsubscribe removes the active email record. The site stores your shortlist on your own browser; it is not an account or a server-synced profile.

Basic measurement and security

When measurement is connected, we count brief views, source clicks, searches, shortlist saves, comparisons, exports, offer views, sample clicks, checkout starts, purchases and deliveries by day and broad source such as article or builder. We do not put your email in these event counters or use advertising cookies. Aggregated counters are retained for up to 180 days. Short-lived hashed network identifiers limit repeated requests. Order references used to prevent duplicate delivery are kept for up to one year.

Service providers and choices

Configured services include Vercel for hosting, Razorpay for payments, Resend for email and Upstash for private subscriber records and counters. Providers may process data in other countries under their own terms. Email correspondence and payment records may be retained to resolve support issues and meet applicable recordkeeping requirements.

To ask about access, correction or deletion of information you provided, contact hello@what2build.com. We may need to verify your request; payment records that must be retained cannot always be removed immediately.