Privacy policy.
Draft privacy information for the local TOP1 sandbox. Public rankings never display payer identity.
Information stored
We store creator usernames, submitter-provided public metadata, bids, test transaction identifiers, ranking history, reports, and optional contact details. Admin passwords are hashed. Session tokens are stored as hashes and sent in HTTP-only cookies.
Public and private
Profile metadata, current ranking bids, and ranking changes are public. Email addresses, phone numbers, transaction IDs, private checkout tokens, and admin audit details are not included in public feeds.
Purpose and retention
Optional contact information supports transaction lookup and future receipts. Email and SMS delivery are not connected in the sandbox. Financial records are retained without rewriting legitimate history. Do not submit sensitive information in reports.
Your requests
Use Report / Removal Request to request review of incorrect personal information or a profile removal. The administrator reviews requests and applicable financial record retention duties.
Before production
DRAFT: add controller identity, contact details, legal bases, retention periods, subprocessors, hosting region, international transfer protections, data-subject rights, and required cookie notices.