Privacy policy

Rank.st is a product-ranking service. For privacy or data-protection requests, contact support@rank.st.

We collect the information needed to run the product board and its related features:

• Listings and payments: submitted URLs, names, descriptions, categories, logos or favicons, paid amounts, ranks and payment confirmation identifiers.
• Traffic and security: page views, visible listing rows, outbound clicks, a first-party visitor cookie, IP address and user agent used for counting and abuse prevention.
• Information you provide: reports, optional supporter names and remarks, and account details if you choose third-party sign-in.

The visitor cookie is named bb_visitor and expires after up to one year.

When available, a secret and the visitor’s IP address and user agent produce a daily one-way identifier. An anonymous first-party cookie may be used when those signals are unavailable. We store the identifier with counted clicks so repeat visits to the same listing during a UTC day do not inflate the public count. We do not claim this blocks all fake traffic.

We share information with providers that perform specific functions for Rank.st:

• Payments: a payment processor hosts checkout and handles card details. We receive transaction amounts, status, and payment, refund and dispute identifiers, but not full card numbers.
• Hosting and security: providers host the service and its data and help protect forms and traffic from abuse.
• Account sign-in: an identity provider authenticates users who choose to create an account.

Some features use service providers to display public product information and images. They may receive the relevant public URL and basic request information.

Optional Rank.st accounts use a third-party sign-in provider. We store your verified email, provider account identifier, internal account ID, login sessions, personal referral link, and counted referral visits. Your email and private dashboard are not public. The provider handles authentication; Rank.st does not receive your sign-in password. Secure, HTTP-only first-party cookies keep sign-in state for up to ten minutes and login sessions for up to seven days. Signing out revokes the current session. Referral visits use the same daily visitor identifiers as traffic counting. Commissions and withdrawals are not currently active. Contact support for account or data requests.

We use listing and payment data to deliver paid placement and keep an auditable record; account information to provide sign-in and referral dashboards; visitor data to count traffic and limit repeat or abusive activity; and reports and technical data to investigate safety, fraud, disputes and service errors.

Listing names, URLs, descriptions, prices, rank, bid activity and measured traffic are visible to anyone and may be indexed. Public supporter names, remarks and contribution amounts are also visible. Do not submit details you want kept private. We do not sell visitor personal data or use the visitor cookie for third-party ad targeting.

The first-party visitor cookie supports traffic counting and abuse controls. Separate secure, HTTP-only cookies support account sign-in and sessions. Payment, identity, hosting, security and metadata providers process information needed for their functions; they may process data in other countries. We do not give them data for unrelated advertising by Rank.st.

We retain listing, payment, refund and moderation records as needed to operate the service, handle disputes, prevent fraud and meet accounting or legal requirements. Traffic and referral records remain while needed for reporting and abuse controls. Retention periods depend on the type of record and why it is needed.

Contact us to request access, correction or deletion of personal data where applicable, or to ask how it has been used or disclosed. We may need information to verify the request and may retain data where required for disputes or legal obligations. We use access controls and other reasonable safeguards, but no internet service can guarantee absolute security.

The service is intended for adults. If you believe a child submitted personal data, contact us. We will update this page when data practices change and identify material changes.