Privacy Policy

Effective August 25, 2026. Last updated August 25, 2026.

This Privacy Policy explains how dealsrank.lol (https://dealsrank.lol) collects, uses, and shares information when you visit the site, click a listing, or pay for a ranking. It sits alongside our Terms of Service.

Who is responsible

The controller for personal data processed through the Service is Tiny Labs Startup LLC, a company based in Massachusetts.

What we collect

We keep the Service small. We collect only what we need to run the board, take payment, stop abuse, and understand traffic.

  • Session identifier. A random session ID in an HTTP-only, SameSite Lax PHP session cookie. We use it to protect checkout and forms (CSRF), enforce rate limits, and keep the board usable while you browse. It is not your name and it is deleted when you close your browser, unless your browser restores sessions.
  • Checkout and listing data. The URL and deal you submit, the category, bid amount, and the public name, description, and image we resolve for that destination. Payment confirmation identifiers from Stripe (checkout and payment IDs) are stored so we can place the ranking.
  • Payment data. Card details and billing identity are collected by Stripe, not by us. Stripe may send us confirmation that you paid and a net amount. See Stripe's own privacy notice.
  • Clicks. When you visit a listing from the board, we increment the public click counter for that listing. We do not store the time, your IP address, or a visitor ID with each individual click.
  • Technical data. Standard request data such as user agent, referrer, and IP address may be processed by our host to operate and secure the Service. IP addresses are hashed for rate limiting and abuse prevention. DataFast's cookieless script may also process technical data for visit and live-visitor counts.
  • Messages you send us. If you email us, we keep that correspondence as needed to respond and to keep a legal record.

Cookies

The PHP session cookie is a strictly necessary, HTTP-only cookie. It lets checkout, CSRF protection, and rate limiting work. We do not use it for advertising. Analytics on dealsrank.lol is loaded with the DataFast cookieless script, which does not use cookies to identify visitors.

Why we use this data

  • Contract. To take payment, create or raise a listing, show rank, and provide the Service you asked for.
  • Legitimate interests. To keep the board fair (rate limits, bot filtering), display public listing metadata, measure visits, debug outages, and defend legal claims. You may object to processing based on legitimate interests as described below.
  • Legal obligation. To keep tax, accounting, and complaint records where the law requires it.

Public listings

Rank, spend, names, images, descriptions, and destination links on the board are public. Anyone can see them, including search engines. Do not list a destination if you do not want that information shown. We fetch public metadata from the site you submit so visitors can recognize the listing. That fetch may disclose to the destination that dealsrank.lol requested the page.

Who we share data with

  • Stripe — checkout and payment confirmation.
  • DataFast — cookieless visit and live-visitor counts. We also show a public stats page and may use an affiliate link to DataFast.
  • Hosting, database, and edge infrastructure (currently including Vercel and Postgres) so the site can run.
  • Identity lookup helpers (for example, metadata and favicon services) so we can show a name and picture before and after checkout.
  • Professional advisers, authorities, or a buyer of the Service if we must share data to comply with law, enforce the Terms, or transfer the project.

We do not sell your personal data. Some processors may be outside the European Economic Area. Where we rely on them, we use appropriate safeguards such as the processors' standard contractual clauses or an equivalent mechanism they provide.

How long we keep it

  • PHP session cookies last for the browser session, or until you clear cookies.
  • Public ranking entries stay while the listing is on the board and may remain in backups or activity history after a takedown for a limited time.
  • Payment identifiers and amounts are kept as long as needed for accounting, tax, fraud, and dispute handling.
  • Rate-limit data is kept only for the length of the rate-limiting window, typically minutes.

Your rights

If the GDPR or similar law applies to you, you may ask us to access, correct, delete, or export personal data we hold about you, to restrict or object to certain processing, and to withdraw consent where processing was based on consent. You may also lodge a complaint with a supervisory authority, including in your state or country of residence.

Email contact@dealsrank.lol. We may need enough information to find your data. Public listing content that is also on your own website is not made private just by appearing on the board; you can ask us to remove the listing.

Children

The Service is for adults. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data we can identify.

Changes

We may update this policy when the Service or the law changes. The date at the top of this page is the current version. If a change is material, we will post the updated policy here.