What I collect
Privacy
This site sells squares. It does not need to know who you are, so it does not try to find out. Here is everything it records.
Last updated 27 August 2026
01 — Cookies
None for visitors
No tracking cookies, so no cookie banner. The only cookie anywhere is the admin login I use myself. Visiting, clicking and buying set none.
02 — Counting
Only totals
The site counts events: board views, tile clicks, page views, click-throughs, checkouts and refunds. A row never holds your IP, browser, or anything that points at you. Two numbers are public — each listing's clicks and click-throughs — and a total cannot be taken apart into people. Repeat clicks in one visit count once, decided in your browser and never stored.
Rate limits are the one place an IP is touched: a hashed key with a timestamp, kept in memory, used for counting and nothing else.
03 — Buyers
What buying a spot stores
Public: name, tagline, logo, domain, total paid, rank, click counts. Private: payment records and your email. Your email gets receipts, proves the listing is yours, and — only if you ticked the box — gets the rank email. It is never shown anywhere. Cards are Stripe's business; this site never sees one.
04 — One email
The rank email, if you asked
One optional email exists: a note when you leave the top ten or fall off the board. Off unless you tick the box. At most one a week, never right after your own payment. One click stops it and changes nothing else. Bounced or reported addresses are dropped for good. There is no newsletter, and your address is never sold or shared.
05 — Services
Who else touches this
Stripe for payments. A Postgres database for listings. Cloudflare R2 for uploaded logos and Cloudflare for sending the rank email. Plausible, if turned on, for the visitor count in the top bar — cookieless, aggregate only. Logo lookups run through this site's own server, so your browser never talks to a logo service and nobody learns which tiles you looked at.
06 — Retention
Kept until you ask
Placement is forever, so records are too. Payment records stay because rank is computed from them. If that is not okay, do not buy a spot — as a visitor there is nothing of yours to keep.
07 — Your rights
Ask, and it happens
Email from an address I can tie to the listing. You can have the listing removed, details fixed, the email changed or erased, or a copy of what is held. One warning: erasing the email erases the only proof the listing is yours, so top-ups stop until it is re-proven. What Stripe holds is Stripe's; payment records outlive removed listings because money records must exist.