Privacy Policy

Effective September 22, 2026. Last updated September 22, 2026.

This Privacy Policy explains how rankbrat (the "Service") collects, uses, and shares information when you visit the site, click a listing, or pay for a ranking. It sits alongside our Terms of Service.

Who is responsible

The controller for personal data processed through the Service is Felipe Vogel, a sole proprietor.

Email: felipe@optim.media

What we collect

We keep the Service small. We collect only what we need to run the board, take payment, stop abuse, and understand traffic.

Visitor identifier. A random ID in your browser's local storage (under the key rankbrat-visitor-key), kept until you clear your browser data. We use it to count daily and current visitors, attach clicks to a browser, and limit duplicate click counts. It is not your name, and it is not linked to your identity.
Checkout and listing data. The URL or X handle you submit, the category, the rank amount, and the public name, description, and image we resolve for that destination. Payment confirmation identifiers from Stripe (checkout session IDs) are stored so each payment creates exactly one placement.
Payment data. Card details and billing identity are collected by Stripe, not by us. Stripe may send us confirmation that you paid and the amount. See Stripe's own privacy notice.
Clicks. When you visit a listing from the board, we record the listing, a time, and the visitor ID. This is for counting and duplicate-click reduction, not to profile you.
Technical data. Standard request data such as user agent and IP address may be processed by our host and database provider to operate and secure the Service.
Messages you send us. If you email a notice, a category correction, or a privacy request, we keep that correspondence as needed to respond and to keep a legal record.

Cookies and local storage

We do not set advertising or tracking cookies. The visitor ID in local storage is strictly necessary: it lets visitor counts, click counting, and duplicate protection work. Your browser also stores a theme preference locally (rankbrat-theme) so the page can stay light or dark.

Why we use this data

Contract. To take payment, create or raise a listing, show rank, and provide the Service you asked for.
Legitimate interests. To keep the board fair (rate limits, bot filtering), display public listing metadata, measure visits and clicks, debug outages, and defend legal claims. You may object to processing based on legitimate interests as described below.
Legal obligation. To keep tax, accounting, and complaint records where the law requires it.

Public listings

Rank, spend, names, images, descriptions, and destination links on the board are public. Anyone can see them, including search engines. Do not list a destination if you do not want that information shown. We fetch public metadata from the site or X profile you submit so visitors can recognize the listing. That fetch may disclose to the destination that rankbrat requested the page.

Who we share data with

Stripe — checkout and payment confirmation.
Hosting, database, and edge infrastructure so the site can run, including storing listings, visitor counts, and click records.
Identity lookup helpers (for example X profile and avatar services) so we can show a name and picture before and after checkout.
Professional advisers, authorities, or a buyer of the Service if we must share data to comply with law, enforce the Terms, or transfer the project.

We do not sell your personal data. Some processors may be outside the European Economic Area. Where we rely on them, we use appropriate safeguards such as the processors' standard contractual clauses or an equivalent mechanism they provide.

How long we keep it

Visitor IDs last until you clear your browser data.
Public ranking entries stay while the listing is on the board and may remain in backups after a takedown for a limited time.
Payment identifiers and amounts are kept as long as needed for accounting, tax, fraud, and dispute handling.
Click records are kept only as long as useful for counting, abuse prevention, and aggregate totals.

Your rights

If the GDPR or similar law applies to you, you may ask us to access, correct, delete, or export personal data we hold about you, to restrict or object to certain processing, and to withdraw consent where processing was based on consent. You may also lodge a complaint with a supervisory authority, including in your country of residence.

Email felipe@optim.media. We may need enough information to find your data. Public listing content that is also on your own website or X profile is not made private just by appearing on the board; you can ask us to remove the listing.

Children

The Service is for adults. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data we can identify.

Changes

We may update this policy when the Service or the law changes. The date at the top of this page is the current version. If a change is material, we will post the updated policy here.

Questions: felipe@optim.media