Privacy policy
What the ranking service records about visitors, listings, and payments.
Who handles the data
Operator details to be added before launch. Privacy requests: Support contact to be added before launch.
What we collect
Public listing URL, title, description, category, thumbnail or favicon, bid amount, rank and payment confirmation identifier; page views, visible listing rows and outbound clicks; a random first-party visitor cookie; technical request data such as IP address and user agent used to limit repeat activity and abuse; and any report you submit. The cookie is named bb_visitor and expires after up to one year.
How counts work
When available, a secret and the visitor’s IP address and user agent produce a daily one-way identifier. Locally, an anonymous cookie is used instead. We store this identifier with counted clicks so repeat visits to the same listing during a UTC day do not inflate the public count. We do not claim this blocks all fake traffic.
Payments and providers
Stripe hosts checkout and handles card details. We store confirmation IDs and amounts to operate rankings and resolve disputes. Cloudflare runs the Worker and D1 database. Public site metadata may come from the destination, Google’s favicon service, or YouTube and TikTok public metadata services. Those services may receive a request when a preview or thumbnail loads.
Accounts and referral tracking
Optional Rank.st accounts use Google sign-in. We store your verified email, Google account identifier, internal account ID, login sessions, personal referral link, and counted referral visits. Your email and private dashboard are not public. Google handles authentication; Rank.st does not receive your Google password. Secure, HTTP-only first-party cookies keep sign-in state for up to ten minutes and login sessions for up to seven days. Signing out revokes the current session. Referral visits use the same daily visitor identifiers as traffic counting. Commissions and withdrawals are not currently active. Contact support for account or data requests.
Public information
Listing names, URLs, descriptions, prices, rank, bid activity and measured traffic are visible to anyone and may be indexed. Do not submit details you want kept private. We do not sell visitor personal data or use the visitor cookie for third-party ad targeting.
Retention and requests
Listing and payment records are kept for service, accounting, dispute and fraud needs. Visitor and click records are kept for the traffic report and abuse checks; a precise deletion schedule must be approved before launch. Contact us to request access, correction or deletion where applicable. We may need enough information to locate your records.
Children and changes
The service is intended for adults. If you believe a child submitted personal data, contact us. We will update this page when data practices change.