Privacy Policy

This Privacy Policy explains how ClickerRank ("ClickerRank," "we," "us," or "our") handles information when you use https://www.clickerrank.com, its pages, and related services (the "Service"). ClickerRank is a public, click-powered product leaderboard.

By using the Service, you acknowledge the practices described here. The Service may link to third-party sites, products, and sign-in providers; their privacy practices are governed by their own policies.

We collect the following categories of information:

• Account and identity information. When you sign in through Google, GitHub, or X/Twitter, we receive information the provider makes available through Supabase Auth, such as a provider identifier, email address, display name, avatar, and linked identities. If you connect X/Twitter, we may also save its verified username to your ClickerRank profile.
• Profile and submitted content. This includes your username, biography, website, X/Twitter username, products, product descriptions, links, logos, screenshots, comments, replies, and moderation reports. Profile, product, leaderboard, and visible comment information is public.
• Activity information. We record pushes, credited points, affected products, timestamps, leaderboard events, product-site visits, reports, and moderation status. For fraud and abuse prevention, push records may include risk scores, rejection reasons, and salted one-way hashes derived from IP addresses and user-agent strings. We do not store the corresponding raw IP address or raw user-agent string in these application event tables.
• Transaction information. For Boost purchases, we retain the selected product, point quantity, price, purchase status, provider reference, and fulfillment time. Our payment provider, Dodo Payments, receives information needed to process the checkout, including your name and email. ClickerRank does not receive or store your complete payment-card number.
• Device, analytics, and diagnostic information. Our infrastructure and analytics providers may process IP address, browser/device details, pages viewed, referring pages, interactions, approximate location derived from network information, performance data, and application errors.

• Provide accounts, profiles, product listings, comments, leaderboards, search, and purchased Boost points.
• Authenticate users, link identities, maintain sessions, and secure accounts.
• Count valid pushes and visits, calculate rankings, and keep public totals accurate.
• Detect bots, spam, fraud, scripted clicking, payment abuse, and other violations.
• Moderate content, investigate reports, debug failures, and protect users and the Service.
• Measure usage and improve reliability, usability, features, and performance.
• Comply with law, enforce our Terms, and establish or defend legal claims.

We use cookies or similar browser storage to keep you signed in, complete OAuth sign-in, remember functional preferences such as live leaderboard updates, prevent abuse, and maintain security. These functions are necessary to provide the features you request.

PostHog may use cookies or local storage for product analytics and diagnostics. You can restrict cookies using your browser settings, but blocking necessary storage can prevent sign-in and other parts of the Service from working. Where applicable law requires it, we will treat non-essential analytics according to the required consent rules.

We do not sell personal information or use it for cross-context behavioral advertising. We may disclose it:

• Publicly, when you publish a profile, product, comment, score, or other content intended for the public Service.
• To service providers, including Supabase for authentication and database services; Cloudflare for hosting, network security, Turnstile, and image storage; Upstash for Redis caching, rate limits, and abuse signals; PostHog for analytics and diagnostics; and Dodo Payments for checkout and payment processing.
• To identity providers, such as Google, GitHub, and X/Twitter when you choose their sign-in or account-linking flow.
• For safety and legal reasons, when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or enforce our agreements.
• In a business transfer, such as a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We retain account, profile, submitted content, aggregate leaderboard totals, moderation records, and transaction records for as long as reasonably needed to operate the Service, fulfill purchases, resolve disputes, enforce our Terms, and meet legal, tax, accounting, and security obligations.

Our current application retention targets are 90 days for detailed push-event audit records and 180 days for product-site visit events. Aggregate scores remain after those detailed records are removed. Data may persist longer in backups, security records, unresolved investigations, or where law requires it.

You can edit available profile and product fields from the Service and sign out at any time. Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, object to certain processing, or withdraw consent where processing is based on consent.

To make an account or privacy request, contact us as described in the Contact section. We may need to verify that the request comes from the account owner. We may retain information where permitted or required by law, including transaction, fraud-prevention, security, and legal records.

ClickerRank and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, providers use recognized safeguards for these transfers.

We use reasonable technical and organizational safeguards designed to protect information, including controlled access, authenticated sessions, rate limits, provider-managed encryption in transit, and hashing of IP and user-agent values before application-level event storage. No internet service is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must also be old enough to consent to online services under the law where you live. If you believe a child provided personal information improperly, please contact us so we can investigate.

We may update this policy as the Service or law changes. We will publish the revised policy here and update the effective date. If a change materially affects how we handle information, we will provide additional notice when appropriate.

For privacy questions or requests, contact the ClickerRank operator through the official @clickerrank X account. Do not send passwords, OAuth secrets, complete payment-card numbers, or other sensitive credentials. You can review the rules governing the Service in our Terms of Service.