the short version
Privacy Policy
last updated September 16, 2026
There are no accounts. No names, no emails, no passwords. Listings are public by design and who submitted or paid for a listing is never shown with it. Card details are handled by Dodo Payments and never reach this service. No ads, no data selling.
1. Listings are public
Each listing shows its website address, name, description, logo, rank, click count, total paid and listing date. Anyone can see this, and it may be exposed through the site's public data.
2. When you submit a website
- We receive the URL you enter.
- Our server visits that page (as PodiumBot) to read its name, description and logo, and to check it against the rules.
- Your IP address is used briefly for rate limiting — counters expire within a day.
- Nothing identifying you is saved with the listing.
3. When you pay
- Checkout runs on Dodo Payments, which collects what it needs (email, billing details, card) under its own privacy policy.
- On success, Dodo notifies this service. Stored from that notification: the payment ID, which listing moved, how many ranks, the amount, ranks before and after, an internal checkout reference and the time.
- Your name, email and card details are not stored here.
4. Clicks
Clicking a listing adds one to its public count. Nothing about who clicked is stored. Clicks are throttled per network to blunt inflation — the counter itself does not record visitors.
5. Security and rate limiting
- IP addresses are used as short-lived counters (rate limits for submissions, scrapes, checkouts and clicks). Counters self-delete within a day at most.
- The hosting platform keeps short-lived request logs for security and debugging, as every host does.
- Failed payment-webhook verifications are logged with the sender's IP so problems can be investigated and refunded.
6. Logos and third-party content
Listing logos load directly from each listed website. When the board renders, those sites (or their hosts) can see your IP and browser details, exactly as if you visited them. Your browser is asked not to tell them which page you were on.
7. Stored in your browser
- Your light/dark theme choice, in local storage.
No advertising cookies, no login cookies, no third-party trackers.
8. Service providers
These process data to run the service, each under its own privacy policy, and some may process data outside India:
- Vercel — hosting
- Supabase — database
- Dodo Payments — payments
- Upstash — rate limiting (production)
9. How long data is kept
- Listings: for as long as the board runs, unless removed.
- Payment records: for as long as the board runs and longer where accounting, tax or disputes require, even if a listing is removed.
- Rate-limit counters: a day at most. Hosting logs: whatever the platform retains.
10. Your choices
- You can ask what personal data is held about you, and ask for corrections or deletion.
- If a listing is for a site you own, you can ask for it to be changed or removed.
- Payment records that must be kept for accounting or tax are not deleted.
11. Children
The service is not for children, and you must be 18 or older to pay. If you believe a child shared personal data, contact us and it will be deleted.
12. Changes
If this policy changes, the date at the top changes with it.