Privacy Policy
Amphibian Digital LLC · Last updated: September 21, 2026
1. Who I am
Amphibian Digital LLC is a limited liability company registered in the State of Wyoming, United States, at 30 N Gould St Ste N, Sheridan, WY 82801. It is a one-person company: I am its only member, and I run it myself. On this page, "I", "me" and "my" mean the company and me as the person behind it. I operate this website and the following products:
- FrogDR (frogdr.com), domain rating tracking.
- twelve.tools, a daily tools directory.
- ramen.tools, a directory of tools used by indie makers.
- Serpivore (serpivore.com), Google keyword rank and SERP feature tracking.
For any privacy question, write to sam@frogdr.com or to the postal address above.
2. What this policy covers
This policy describes how I handle personal data when you visit this website (amphibiandigital.com) or use any of the products listed above. Some products may publish a service-specific policy as well; where a product has its own policy, both apply to that product.
Amphibian Digital LLC is the controller of the personal data described here. Where a payment provider acts as merchant of record for a purchase, that provider is the controller of the payment data it collects, and its own privacy policy applies to it.
3. Information I collect
3.1 Information you give me
- Account data. Your email address, a password stored only as a salted hash (I never store passwords in plain text), and any display name or handle you choose.
- Content you submit. For directories and tracking tools this includes the website URL, tool or product name, headline, description, category, tags, logo or image, and any text you paste into a form.
- Messages. What you send me through contact or support forms, by email, or when you ask about a listing, an account or a bill.
- Billing details. The information you enter on the checkout page is collected by Stripe, my payment provider. I do not receive or store your full card number, expiry date or CVC.
3.2 Information I receive about payments
Payments and subscription billing are handled by Stripe. So that I can activate a plan, renew it, chase a failed payment, or answer a billing question, Stripe sends me limited data such as your name, email address, billing country and postal code, card brand and last four digits, and the status of your subscription and invoices.
3.3 Information collected automatically
- Technical data. Your IP address, browser and device user agent, the pages you request and when, and the page you arrived from. My servers keep standard access logs.
- Abuse-prevention records. Short-lived records that combine your IP address with an action (a submission, a badge verification, an email) so I can rate-limit spam and automated attacks.
- Website snapshots. When you submit a website to one of my directories, my systems may fetch that public website and store a screenshot of it for the listing.
- Cookies. See section 4.
3.4 Information I obtain from other sources
- Domain and search data. When you submit or track a domain, I look up data about that domain, for example domain rating, backlink counts or search ranking positions, through providers such as Ahrefs.
- Delivery and billing status. Limited technical data from my email and payment providers, such as whether a transactional email was delivered or whether a payment succeeded.
3.5 Automated screening
Submissions and content may be screened automatically, including by third-party AI services, to detect spam and abuse and to prepare short summaries of submitted material. These systems support human review; they are not used to make decisions that produce legal effects about you.
4. Cookies and similar technologies
I use a small number of first-party cookies and local storage entries that the products need in order to work:
- Session or login cookie. Keeps you signed in after you authenticate, including on magic-link sign-in. It contains a token, not your password.
- Preference cookie. Remembers interface choices such as theme, or on some listings the state of an interactive element such as a "like".
- Development-preview cookie. Lets me show the staging version of a site to internal reviewers.
I do not use advertising cookies and I do not sell or share cookie data with advertising networks. Some of my products load libraries from third-party sites, and payment pages hosted by Stripe set their own cookies under Stripe's privacy policy. You can block or delete cookies in your browser settings; if you block the session cookie you will not be able to sign in.
5. What I use information for
| Purpose | Provide the services, create accounts, publish and display listings, run and renew subscriptions. |
|---|---|
| Legal basis | Performance of a contract with you. |
| Purpose | Take payments, issue invoices, handle taxes, prevent payment fraud. |
| Legal basis | Performance of a contract and compliance with legal obligations. |
| Purpose | Send transactional email: verification, submission confirmations, status changes, receipts. |
| Legal basis | Performance of a contract. |
| Purpose | Protect the services against spam, abuse and automated attacks; keep security logs. |
| Legal basis | My legitimate interests in keeping the services available and safe. |
| Purpose | Understand aggregate usage and improve the products. |
| Legal basis | My legitimate interests in improving what I build. |
| Purpose | Comply with legal requests and enforce my Terms of Service. |
| Legal basis | Compliance with legal obligations and my legitimate interests. |
I do not sell your personal data.
6. Who I share information with
I share personal data only with the service providers I need to run the products, and only for the purposes described above:
- Stripe, for payment processing, subscription billing, tax calculation and fraud prevention.
- Zoho ZeptoMail, for delivering transactional email.
- Ahrefs, for domain, backlink and search ranking data used by my tracking tools.
- AI and automation providers, which process the submitted content needed to screen it for spam and abuse and to prepare summaries.
- Hosting and infrastructure providers, including OVHcloud (servers), o2switch (hosting) and Cloudflare, where it fronts one of my domains for DNS, content delivery and DDoS protection.
I may also disclose information where the law requires it, to respond to valid legal requests, or to protect my rights, my users and the security of the services. If I ever transfer a product or the company to someone else, the related data may transfer with it under the same commitments.
7. How long I keep information
- Account data is kept while your account exists and for a reasonable period after that so I can handle deletion, disputes and legal claims, then deleted.
- Listing and submission data, including screenshots I take of submitted websites, is kept while the listing is live. When a listing is removed, its data is deleted.
- Payment and invoice records are kept as long as tax and accounting rules require.
- Logs and abuse-prevention records are kept for short periods and used for security and rate limiting.
- Messages you send me are kept as long as needed to deal with the matter.
8. Where your information is processed
I run the company from Indonesia and the United States. My servers and those of my providers are located in the European Union, North America and elsewhere. Your information may therefore be transferred to, stored in, and processed in a country other than the one you live in, including outside the EEA and the UK. Where the law requires it, such transfers are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data I hold about you, and receive a copy of it;
- have inaccurate data corrected;
- have your data deleted, for example when it is no longer needed or when you withdraw consent;
- restrict or object to certain processing, including processing based on my legitimate interests;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time where processing is based on consent.
Write to sam@frogdr.com to exercise any of these rights, and tell me which product it concerns. I will respond within the time limits set by applicable law. If you are in the EEA, Switzerland or the UK, you also have the right to complain to your national supervisory authority.
California residents. The CCPA/CPRA gives you the right to know what personal information I collect, to request its deletion and correction, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. I do not sell or share personal information as those terms are defined by the CCPA/CPRA, and I will not discriminate against you for exercising your rights. To make a request, use the email address above.
10. Security
Traffic to my sites is encrypted with TLS. Passwords are stored only as bcrypt hashes. Card data never reaches my servers, because the checkout pages are hosted by Stripe. Access to my servers and databases is limited to the people who need it, and administrative features are protected by authentication and rate limiting. No system is perfectly secure, and I cannot guarantee that a breach will never happen; if I become aware of a breach that affects you, I will notify you and any regulator as the law requires.
11. Children
My services are aimed at professionals and businesses, and are not directed at children. I do not knowingly collect personal data from anyone under 16. If you believe a child has given me personal data, write to sam@frogdr.com and I will delete it.
12. Changes to this policy
I may update this policy as the products change or the law requires. The "Last updated" date at the top of this page always shows the current version, and material changes will be described on this page.
13. Contact
Amphibian Digital LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States
Email: sam@frogdr.com
This policy describes my current practices and is published for transparency. It is not legal advice to anyone, and it does not create rights for third parties.