What we do with your data.

Short version: we store the minimum we need to make ranked.lu work, we don't sell anything, and you can ask us to delete your account at any time.

What we collect

When you visit ranked.lu - even without signing in - we store some basic data so the site can work:

• Anonymous voter ID: a random string saved in your browser's localStorage. We use it to remember which polls you've voted on, so you can't accidentally vote twice. It contains no personal information.
• XP, streak, and level data: also saved in your browser's localStorage. This is what powers the gamification. If you clear your browser data, this is gone.
• Your votes and reactions: stored on our server (Supabase, hosted in Frankfurt) and tied to your anonymous voter ID.

If you sign in with email, we additionally store:

• Your email address, used only for sending magic-link sign-ins. We never email you marketing.
• Your chosen display name, shown publicly on rankings you submit and picks you add.

Why we collect it

• To make voting work (one vote per person per poll)
• To show you your XP, level, and streak across visits
• To let signed-in users sync their progress across devices
• To attribute submitted rankings and added picks to a real account
• To let you sign in via magic link

Who we share it with

Currently: no one. We don't sell, rent, or share your data with advertisers, brokers, or third parties.

We use the following services to run the site, and they process your data on our behalf:

• Supabase - our database and authentication provider (data hosted in EU)
• Resend - sends the magic-link sign-in emails
• Netlify - hosts the website

If we ever start sharing data with anyone else (e.g., for analytics), we'll update this page and tell you about it.

Cookies

We don't use tracking cookies. We use localStorage in your browser to save your voter ID, XP, streak, and view preferences. localStorage is similar to a cookie but stays on your device and isn't sent to advertisers. If you clear your browser data, all of it is wiped.

Your rights under GDPR

You're in the EU, so you have the right to:

• Access the data we hold about you
• Correct anything that's wrong
• Delete your account and all associated data
• Get a copy of your data in a portable format
• Object to how we process your data

To exercise any of these rights, email us at ranked.lu@gmail.com and we'll respond within 30 days (usually within 2-3).

Children

ranked.lu is not directed at children under 13. If you're a parent and believe your child has signed up, email us and we'll delete the account immediately.

Changes to this notice

If we make significant changes, we'll update the date below and notify signed-in users by email. Minor wording changes happen without notice.

Contact

Questions, complaints, or data requests: ranked.lu@gmail.com