Privacy Policy

Draft for review by a qualified US lawyer before launch. The operator must finalize these terms and their business details.

Information we use

We store account email addresses, verification status, business submissions, uploaded images, votes and changes, support requests, and necessary subscription and invoice identifiers. Public business contact information and approved profile content are visible to everyone. Account email addresses are not made public unless supplied as business contact details.

Security and fraud prevention

Email codes are stored as hashes and expire after ten minutes, with a maximum of five verification attempts. Voting may record a keyed, daily-changing hash derived from the request IP for abuse review. The application removes this hash from votes after seven days when scheduled maintenance runs. Shared networks do not automatically cause bans. We do not use invasive device fingerprinting. Hostinger, Cloudflare and other providers may process IP addresses in their own security logs.

Optional analytics

With consent, a random first-party browser cookie lasts 30 days. A month-specific hash counts opted-in browsers and deduplicates daily profile views and contact clicks. These are estimates, not unique identified people or independently verified visitors. No optional activity is recorded when consent is declined. Daily events are retained for up to 90 days; monthly counts for up to 13 months. Change preferences on the Cookie Policy page.

Service providers

Hosting and database services are provided by the operator’s Hostinger account. The configured email provider delivers sign-in messages. Cloudflare Turnstile checks for automated requests. Stripe hosts payment entry and billing management; full card details are not stored by this application. Providers may process information internationally under their own terms.

Retention and your choices

Votes and necessary moderation records are retained to maintain rankings and investigate abuse. Resolved contact requests are removed after 90 days by scheduled maintenance. Accounting records may require longer legal retention. Contact us to request access, correction or deletion; we will verify identity and assess applicable legal requirements. Ordinary seven-day vote locks do not prevent legally required deletion. Backup copies expire according to the operator’s documented retention schedule. Do not submit sensitive identity documents through the general contact form.

Children and policy changes

This service is intended for adults aged 18 and older. We do not knowingly invite children to create accounts. The operator must review privacy rights, regional requirements, provider contracts and retention settings before launch. Material changes will be explained on this page.

Operator: RankByVote. Contact the team.