Technical data: IP address (hashed for abuse detection), browser type, pages visited, timestamps.
Payment data: processed by Stripe; we store only subscription status, never card numbers.
2. How we use it
Operate rankings, voting, and community features.
Detect fraud and abuse (duplicate voting, bots, brigading).
Send service emails (verification, password reset, notifications you opt into).
3. What we never do
We never sell your personal data.
We never expose your email address or IP to other users.
We never store passwords in plain text (bcrypt-hashed) or full payment card details.
4. Your controls
Edit your profile or delete your content at any time from your dashboard.
Request full account deletion via the contact page — we remove your personal data within 30 days, keeping only anonymized vote aggregates required for ranking integrity.
Opt out of notification emails in settings.
5. Data retention
Ranking snapshots are permanent public records of published cycles. Session tokens expire after 30 days. Hashed abuse-detection signals are kept for 12 months.
6. Contact
Privacy questions or requests: use the contact page.
