Privacy Policy

1. Introduction

DuelRank ("we", "our", or "us") operates the public founder challenge leaderboard available at duelrank.org (the "Service"). This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly and information generated as you use the Service:

• Product and founder information. When you submit a product, claim a profile, or challenge another product, we collect the product name, website URL, category, description, founder name and role, and a contact email for claim verification.
• Payment information. When you purchase a spotlight, we collect payment metadata such as the amount, placement details, and transaction reference. Card numbers and payment credentials are processed by our payment provider, Stripe, and are not stored by us.
• Usage and interaction data. We record outbound link clicks on the leaderboard (for example, how many times a product website link is clicked) and may log standard technical data such as IP address, browser type, and pages visited to operate and secure the Service.
• Cookies and local storage. We use a small, essential cookie to keep administrators signed in to the admin panel. We do not use advertising or third-party tracking cookies.

3. How We Use Your Information

• To operate the leaderboard, process submissions, claims, and paid spotlights.
• To verify founder identity and prevent impersonation or abuse.
• To send transactional notices about your submission, payment, or claim.
• To send outreach messages to makers of newly launched products about DuelRank, including by email, where we have a lawful basis and a contact address is available.
• To maintain the accuracy and integrity of rankings, including detecting fraudulent or malicious activity.
• To comply with legal obligations and enforce our Terms of Service.

4. Legal Bases for Processing

Where the GDPR applies, we process personal data on the following bases: performance of a contract (providing the Service you requested, including paid placements); legitimate interests (operating and securing the Service, preventing abuse, and promoting it to founders of relevant products); consent (where we rely on it for outreach messages, which you may withdraw at any time); and compliance with legal obligations (such as tax and accounting records).

5. Payment Processing

Payments for spotlights are processed by Stripe, Inc. through Stripe Checkout. We do not collect, store, or process card numbers or other payment credentials ourselves. Payment data is subject to Stripe's own privacy policy, and Stripe is certified to the PCI DSS. We only receive confirmation of successful payments and the metadata needed to activate your placement.

6. Third-Party Services

We work with a limited number of service providers to run the Service, including: our hosting and infrastructure provider; Stripe for payment processing; and Resend (or a similar provider) for sending outreach and transactional email. These providers process personal data only as needed to perform services on our behalf, under our instructions and confidentiality obligations. We do not sell your personal data.

7. How We Share Information

We share information only in the following circumstances: with service providers who help operate the Service; when you make information public through the Service (for example, product listings and challenge notes are visible to all visitors); to comply with the law, a court order, or a government request; to protect the rights, property, or safety of DuelRank, our users, or the public; and in connection with a merger, sale, or transfer of assets, in which case you will be notified of any change in control or use of your data.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy. Payment records are retained to satisfy tax and accounting obligations. Lead and outreach records are retained while they remain useful for outreach, and may be deleted upon request. When data is no longer needed, we delete or anonymize it. Note that information you make public on the leaderboard may remain visible until you ask us to remove it.

9. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data; to object to or restrict certain processing; and to withdraw consent at any time. To exercise any of these rights, contact us at admin@duelrank.org. We will respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at admin@duelrank.org and we will delete it.

11. International Data Transfers

We may process data in countries other than your own, including through service providers located in the United States and the European Economic Area. When we transfer personal data across borders, we rely on appropriate safeguards, such as the European Commission's adequacy decisions or standard contractual clauses, as applicable.

12. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including encrypted connections (HTTPS), restricted access to administrative functions, and secure storage of credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at admin@duelrank.org.

Read the terms of service.