Privacy

When you sign in. Sign-in is Google only. Google gives us your name, email address, profile picture and your Google account identifier. Each active session also records the IP address and browser user agent it was created from, so sessions can be told apart and expired.

When you pay. Payments are processed by Dodo Payments, which acts as merchant of record. Card details are entered on their checkout and never reach this site. We keep the amount, the currency, the status, and Dodo’s payment and checkout identifiers, so a payment can be matched to a listing.

When you list a website. We store the URL you submit, after stripping its query string. Our server then requests that page and reads its title, description and icon. That request comes from our server, not from your browser, and it identifies itself as IndieRankBot.

When anyone visits a page. We record the path visited, the visiting country, the referring domain, and a salted one-way hash of the IP address and user agent. The hash is what lets us count a person once instead of twice. Raw IP addresses are never written to the analytics tables, and the hash cannot be reversed back into an address.

When anyone clicks a listing. The same details, plus which listing was clicked. This is what produces the public click count.

Anyone can see, on the board and on the analytics page:

• A listing’s URL, title, description and icon.
• The total amount that listing has paid, and its rank.
• The number of clicks that listing has received.
• Aggregate visitor counts and countries across the whole site.

Your name, email address and payment records are never shown publicly. A listing is not labelled with who owns it.

A session cookie is set when you sign in. It is required for the site to know you are signed in, and it is removed when you sign out.

Your light or dark theme preference is kept in your browser’s local storage. It never reaches the server.

There are no advertising, profiling or cross-site tracking cookies.

Nothing is sold, rented or shared for advertising. Data is handled by these providers, each only for the job named:

• Google — sign-in.
• Dodo Payments — taking payments and handling any applicable tax, under their own privacy policy.
• Neon — the database everything is stored in.
• Vercel — hosting, which includes standard server logs and the country lookup used above.

We will also disclose information where the law requires it, or where it is necessary to investigate fraud or abuse of the board.

Clicking a listing sends you through this site first so the click can be counted, and then straight on to the URL that was submitted. The destination is someone else’s website and this policy stops at that point. We pass none of your details to them. They will see that the visit came from indierank.lol, so they can credit the traffic, but not which page you came from and nothing about you.

Listings, payment records and click counts are kept for as long as the board runs, since a rank is a lifetime total and the ledger has to stay consistent. Payment records may also need to be retained for tax and accounting purposes.

Page view and click event rows are kept to produce the public statistics. Session records expire on their own within 30 days.

Email ubergeekady@gmail.com to get a copy of what is held about you, to correct it, or to have your account deleted.

Deleting your account removes your sign-in details and your listings from the board. Money already paid is not refunded, and anonymised totals may remain in the aggregate statistics. Because visitor analytics are stored as an irreversible hash, individual page views cannot be traced back to a person and so cannot be selectively removed.

Data is held on managed infrastructure and reached over encrypted connections. No system is perfect, and no guarantee of absolute security is being made.

The board is not intended for anyone under 18, and accounts are not knowingly created for them.

If this policy changes, the date at the top changes with it. Continuing to use the board after that means the updated version applies.