Privacy Policy

• Entry data you publish: display name, profile link, tagline and avatar (image URL or emoji). This is public by design and visible to everyone.
• Payment data: the amount paid, a payment reference from Stripe, and the timestamp. We do not receive your card number or CVC.
• Email address (optional): if you provide one at checkout, it is used only for your receipt and for an optional notification when you are outbid. It is stored privately and never shown on the leaderboard.
• Click counts: we count how many times each profile link is clicked. This is an aggregate counter, not per-visitor tracking.
• Analytics: aggregate visit data via Datafa.st (see below).

All payments are processed directly by Stripe. Card numbers, CVC codes and full payment credentials are handled by Stripe on their PCI-compliant infrastructure and are never transmitted to or stored by RichRank.app. Stripe processes your data as an independent controller under its own privacy policy.

We use Datafa.st, a privacy-friendly analytics service, to count page views and traffic sources. It does not use cross-site tracking cookies and does not build advertising profiles. It processes coarse, aggregated technical data such as approximate location derived from IP, referrer, page path, device type and browser. IP addresses are not stored in a form we can use to identify you.

• Performance of a contract: publishing your entry and processing your payment.
• Legitimate interests: keeping the site running, preventing abuse, measuring aggregate traffic.
• Legal obligation: keeping payment and tax records.

We share data only with the processors needed to run the site: our hosting and database provider, Stripe (payments), and Datafa.st (analytics). We never sell your data.

If you are in the EU/EEA or UK, you have the right to access, correct, delete, restrict or object to processing of your personal data, and the right to data portability and to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email [insert contact email]. Note: deleting your entry from the public leaderboard does not entitle you to a refund, and payment records may be retained where we are legally required to keep them.

To stop outbid notification emails, use the unsubscribe link in any such email or email us.

Public entry data is retained for as long as the leaderboard exists, because the board is a permanent public record of payments. Email addresses are retained until you unsubscribe or request deletion. Payment records are retained for the period required by applicable accounting and tax law (typically 7 years). Analytics data is retained in aggregate form only.

Data protection contact: [insert contact email].