Privacy Policy

• We store an email address and username for account holders. That is the only directly identifying data we hold.
• We never store raw IP addresses. Votes and page views are counted against a salted hash of the address, and the hashes used for view counting are deleted after three days.
• We do not sell data, and we do not run third-party advertising networks — the ads on VoteRank are sold and served by us.
• You can export or delete your account data at any time.

If you have an account

• Email address, username, and a hash of your password. We never store the password itself.
• Anything you choose to put on a listing: name, description, artwork, website and Discord links, server address.
• Wallet balance and a ledger of deposits and ad spending, kept for accounting.
• Timestamps for account creation and last sign-in.

If you vote

• A salted SHA-256 hash of your IP address, the listing, and the time. The hash enforces the voting cooldown and detects fraud; it cannot be reversed to recover the address.
• A two-letter country code, derived from the request, for the vote-origin chart on a listing.
• The in-game name you type, if the server asks for one — passed to that server so it can give you the reward, and stored with the vote so the server can verify it later.

If you just browse

• A daily counter of unique visitors per listing, again keyed on a hashed address. Those rows are deleted after three days; only the aggregate count survives.
• Standard server logs from our hosting providers, which include IP addresses and are retained by them for a short period.

Under the GDPR we rely on: contract for anything needed to run your account, listings and advertising; legitimate interest for fraud prevention, aggregate analytics and keeping the site working; and legal obligation for keeping payment records. We do not rely on consent for any of the above, which is why there is no cookie wall in front of the site — the only optional cookies are analytics, and you can decline them without losing anything.

• Essential: two session cookies (a short-lived access token and a refresh token) that keep you signed in, plus the cookie recording your choice in the consent banner. These are always set, because the site cannot work without them.
• Analytics: Vercel Analytics, which counts page views without cookies or cross-site identifiers. Loaded only if you accept analytics in the banner.
• hCaptcha sets its own cookies when a captcha is shown on the vote or contact forms. It is there to stop automated abuse.

There are no advertising or tracking cookies. Ads on VoteRank are our own inventory, targeted by which page you are on and nothing else.

We do not sell or rent personal data. It reaches other companies only where they run part of the service:

• Our hosting and database providers, who store it on our behalf.
• hCaptcha, when a captcha is displayed.
• Our payment provider, when you deposit funds. Card details go to them and never touch our servers.
• A listing's own server, when you vote with an in-game name and that server has a callback configured — the name and the fact of the vote are sent so the reward can be delivered.

Live player counts are fetched by us from Steam, Twitch, TibiaData and the servers themselves. Those requests come from our servers, not your browser, so browsing VoteRank does not expose you to them.

• Account data: until you delete the account.
• Votes: kept as counts indefinitely; the individual rows, with their hashed addresses, for 12 months.
• Daily visitor hashes: three days.
• Payment and ledger records: as long as tax law requires, typically seven years.
• Server logs: as retained by our hosting providers, typically 30 days.

If you are in the EU or UK you have the right to access, correct, export, restrict or delete your personal data, and to object to processing based on legitimate interest. You can delete your account and its listings yourself from the dashboard. For anything else, use the contact form under the “Privacy” topic — we answer within 30 days. You can also complain to your national data protection authority.

VoteRank is not aimed at children under 13, and we do not knowingly hold data about them. If you believe a child has created an account, contact us and we will remove it.

We will post any change here and update the date above. If a change materially affects how we use your data, we will say so on the site rather than relying on you re-reading this page.