Privacy

The board is public on purpose. Your email is not, and never will be.

Who is responsible

This site is run by one person, based in Spain. Contact: c00y@proton.me.
For the payment itself, Stripe and its Link service act as merchant of record and handle your card details. We never see or store your card number.

Your email address. It is how we know a purchase and a profile belong to the same person, and how we sign you in. Legal basis: performance of the contract.
Your profile: display name, picture, country, bio, income source, declared net worth and links. You give us these and you can change or delete them at any time from your profile page.
Your IP address, browser user-agent and the moment the terms were shown to you, recorded with each purchase. Legal basis: legitimate interest in preventing fraud and defending payment disputes. Without this we cannot answer a chargeback.
A count of clicks on your outbound link. It is a number, not a log of who clicked.
The IP of whoever reports a profile, so the same person cannot flood us with reports.

Your display name, picture, country, bio, income source, declared net worth, links, total spent, rank and click count.
Your email address is never public. It is not in the page, not in the API responses, and not in the share images.
Everything public is public because you paid to make it public. That is the product.

Stripe and Link, for taking the payment, issuing your invoice and handling tax and disputes.
Supabase, which hosts the database, the sign-in links and the uploaded pictures.
Vercel, which serves the site.
Nobody else. We do not sell anything to anyone, and there are no advertising or tracking pixels on this site.

Profile data stays while your position exists on the board.
Payment records, including IP and user-agent, are kept as long as the law requires for accounting and for the period in which a dispute can still be raised.
If you ask us to erase your profile, the public content goes. The payment record stays, because we are legally required to keep it.

You can ask for access, correction, erasure, portability, restriction, or object to processing based on legitimate interest. Write to c00y@proton.me.
Most of it you can do yourself: sign in and edit or clear your profile.
You can complain to the Spanish data protection authority, the AEPD, or to the authority of the country where you live.

We set one kind of cookie: the session that keeps you signed in after you use a sign-in link. It is strictly necessary and there is no consent banner because there is nothing optional to consent to.
No analytics cookies, no advertising cookies, no third-party trackers.