Privacy Policy

1. Information we collect

• Account details: your email address, account ID and password (stored securely by our sign-in provider, never readable by staff).
• Discord sign-in: when you sign in with or link Discord we receive your Discord user ID, username, avatar and email address. We use this to sign you in, check membership of the RuneRank Discord for giveaways and roles, and grant Discord roles you have earned.
• Listings: server details, links, images and descriptions you submit, and which account owns each server.
• Votes: the in-game username you enter, the server, time, a one-way hash of your IP address, a hashed device fingerprint, your browser's user agent and an anti-cheat risk result.
• Site analytics: a randomly generated visitor ID and visit ID stored in your browser, pages viewed, referrer and campaign tags, approximate country and device type. These IDs are pseudonymous: they do not contain your name or email, but they can still be linked to your browser and, while you are signed in, to your account.
• Ads: counts of ad impressions and clicks.
• Payments: the plan or ad bought, amount, status and Stripe customer and subscription IDs.
• Community features: events, giveaway entries, Content Creator applications (channel, videos, Discord contact), suggestions and contact-form messages (name, email, message).

2. How we use it

To sign you in and run your account; operate listings, rankings and vote rewards; detect and prevent vote fraud and abuse; process purchases; run events, giveaways and the creator showcase; answer support requests; send account and purchase emails; and measure and improve the site. Public statistics show only aggregate totals and never identify individual visitors.

3. Voting and anti-abuse

When you vote, your IP address is read by our server only long enough to create a one-way hash, and the hash is stored instead of the IP. Hashes, device fingerprints and the human verification check (Cloudflare Turnstile) let us enforce the 12-hour cooldown and block automated or duplicate votes. Server owners see vote counts and the usernames entered for rewards, never IP addresses or hashes. When a server has set up a vote callback, the username you entered is sent to that server so it can deliver your reward.

4. Cookies and local storage

We use a sign-in session (stored in your browser) to keep you logged in, a first-party cookie and local storage for the pseudonymous visitor and visit IDs used in analytics, and local storage to remember choices such as dismissing the Discord invitation. Cloudflare Turnstile may set cookies needed for its security check. We do not use third-party advertising or tracking cookies. You can clear or block cookies in your browser, but sign-in and voting may stop working.

5. Payments

Payments are handled by Stripe. Your card details go directly to Stripe; RuneRank never sees or stores full card numbers. We receive confirmation of the purchase, its status and Stripe IDs. Stripe processes your information under its own privacy policy.

6. Service providers

• Lovable Cloud (built on Supabase): hosting, database, sign-in and file storage;
• Cloudflare: website delivery, security and Turnstile human verification;
• Discord: sign-in, community membership checks, roles and bot features;
• Stripe: payment processing and subscriptions;
• YouTube: embedded creator videos and public video details (embeds use YouTube's privacy-enhanced mode);
• Google Search Console: aggregate search performance for the site (no visitor data is shared);
• an email delivery provider for account and notification emails.

These providers may process data in countries other than your own.

7. How long we keep information

We keep information only for as long as it is needed for a legitimate purpose, and we do not keep personal information indefinitely without one. Historical voting and analytics records may be retained for legitimate platform operations, security, fraud prevention and historical statistics: vote records keep lifetime vote totals and rankings accurate and let us detect repeat abuse, and pseudonymous analytics let us show long-term trends on our public statistics page. Where records are kept for these purposes, directly identifying details are limited to what the purpose requires — for example, IP addresses are stored only as one-way hashes. Payment records are kept as long as needed for accounting, tax and dispute purposes. When you ask us to delete your account we remove or anonymize your personal information, except for records we need to keep for fraud prevention, legal or accounting reasons. We do not currently delete most of these records automatically on a fixed schedule.

8. Your rights and requests

You can ask to access, correct or delete your personal information, or object to how we use it, by opening a support ticket in our Discord at discord.gg/runerank or using the contact form. We may need to confirm you own the account. Depending on where you live you may also have the right to complain to a data protection authority.

9. Security

We use access controls, encrypted connections, hashing of IP addresses and restricted staff access to protect information. No system is completely secure, and we cannot guarantee absolute security.

10. Children

RuneRank is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we will delete it.

11. Changes

We will announce significant changes in RuneRank's Discord and, where appropriate, with a notice on the site. The date above shows the latest version. See also our Terms of Service.