Privacy policy
Last updated 23 August 2026
There are no accounts and no passwords here, and we never see your card details. Most of what we hold is the claim you deliberately published on a public map.
What we collect
What you put on the map. When you claim a country we store:
- the handle, name, or website link you entered;
- which platform you chose;
- the country, the amount you paid, the colour you picked, and the time;
- for a website claim, a copy of that site's icon.
All of this is shown publicly on the map, in the ledger, in the standings, and in that country's claim history. That is the point of the site — please don't submit anything you wouldn't want public.
Your email address. Stripe collects it at checkout for your receipt and passes it to us with the payment record. It is never shown publicly and we do not send marketing.
Payment details. Card numbers are entered on Stripe's own checkout page and never touch our servers. We receive only a payment reference, the amount, and whether it succeeded. See Stripe's privacy policy.
Abuse prevention. To stop the checkout being spammed we count recent attempts per visitor. Your IP address is hashed before anything is written down — we store a one-way digest, not the address — and those records are deleted automatically about a minute later.
Your theme choice. Light or dark is remembered in your browser's local storage. It stays on your device and is never sent to us.
Page views. We use Vercel Analytics to count visits and see which pages people reach. It is cookieless and does not follow you across other websites. It records the page you viewed, where you arrived from, and your rough location, device, and browser type. It does not build a profile of you and we cannot identify you from it.
What we don't do
- No advertising, and no selling or sharing of your data.
- No cookies — not for analytics, not for anything else.
- No tracking you across other websites.
- No profiling and no automated decisions about you.
Who processes data for us
- Stripe — payments.
- MongoDB Atlas — the database holding claims.
- Vercel — hosting and the page-view analytics above; it also keeps short-lived server logs.
- Google's favicon service — when a website is claimed we ask it for that site's icon. The request contains the claimed domain, not anything about you.
- Google Fonts — the site's two typefaces are served from Google's CDN, which means your browser contacts Google to fetch them.
How long we keep it
Claim records are kept indefinitely by design: past holders remain in each country's history, which is a feature of the site rather than an oversight. Payment records are also kept for accounting and tax purposes.
Hashed rate-limit records are deleted automatically within minutes.
Your choices
You can ask us to remove your handle or link from public display at any time, and we will. We may keep the underlying payment record where we're required to for financial and tax reasons.
Depending on where you live you may also have rights to access, correct, or export your data, or to object to how it's used. Ask and we'll help.
Children
This site is not intended for anyone under 18, and we don't knowingly collect information from children. If you believe a child has made a claim here, contact us and we'll remove it and refund the payment.
Security
Data is encrypted in transit. Uploaded and fetched images are validated by inspecting their actual bytes rather than trusting what they claim to be. No system is perfectly secure, and we can't guarantee absolute security.
Changes
We may update this policy. The date at the top shows when it last changed.
Contact
Privacy questions or removal requests: contact.textpolish@gmail.com.