Privacy Policy

1. Information We Collect

• • Non-personal data such as browser type, operating system, referring pages, and general usage statistics via analytics tools (e.g., Google Analytics).
• • If you create a community account, we collect a private email address, public immutable handle, password authentication record, security-factor metadata, sessions, trusted client IP, policy-version acceptance, and an 18+ affirmation timestamp. We do not collect birthdates.
• • We store posts, replies, votes, reports, notifications, moderation decisions, and security/audit events. Submitted URLs are sent to Google Web Risk for threat screening; community content and URLs are not sent to analytics.

2. How We Use It

• • To improve site performance, user experience, and content relevance.
• • To monitor site traffic and engagement metrics.
• • To authenticate accounts, prevent abuse, review links, enforce rules, send neutral security emails, and protect members and the service.

3. Cookies

We may use cookies to enhance your browsing experience. You can disable cookies through your browser settings.

4. Third-Party Services

Community infrastructure may use MongoDB, Redis, Resend, Cloudflare Turnstile, Google Web Risk, and Vercel. Each provider processes only the data needed for its function. We may also link to external sites not controlled by SpicyRanks.

5. Data Security

We do not sell, rent, or trade user information. All reasonable measures are taken to protect non-personal data collected via the site.

6. Children's Privacy

SpicyRanks is intended for users aged 18 and above. We do not knowingly collect data from minors.

7. Contact

For privacy questions, deletion requests, or appeals, use the SpicyRanks contact page. We may need to verify that you control the account.

8. Retention and Your Choices

Active account and community data is retained while needed to provide and secure the service. Soft-deleted community content is ordinarily retained for 90 days for moderation and appeals, then purged unless a legal, safety, fraud, backup, or dispute hold applies. Append-only moderation records may be retained longer for accountability. You may revoke sessions, reset your password, or request account deletion.