Legal

Privacy Policy

Last updated: April 11, 2026

1. Overview

RankHub ("we", "our", "us") operates rankhub.app. This policy explains what personal data we collect, how we use it, and your rights regarding that data. By using RankHub, you agree to the practices described in this policy.

2. Data We Collect

Account Data

Email, username, display name, and hashed password (bcrypt cost factor 12, never stored in plaintext).

Vote Data

Records of your votes used to calculate Glicko-2 ratings. Anonymous by default — others see vote counts, not who voted.

Profile Data

Bio, website, display name you choose to share publicly.

Usage Data

IPs hashed for rate limiting and basic request metadata. No third-party ad cookies.

Cloudflare Turnstile

Bot abuse prevention. May collect device information or fingerprints. See Cloudflare's Privacy Policy.

3. How We Use Data

  • Calculate and display Glicko-2 ratings
  • Authenticate users and prevent fraud
  • Rate limiting and abuse prevention
  • Display public profiles
  • Improve service via aggregate statistics

4. Data Sharing

We do not sell, rent, or trade your data. We share data with: Supabase (database hosting, encrypted at rest) and Cloudflare (CDN, Workers, edge compute).

5. Data Retention

Vote data is retained indefinitely as it is integral to the rating system. Account data is retained while your account exists. You can request deletion (see Section 7).

6. Your Rights

  • Access, correct, or delete your data via Settings
  • Export your vote history
  • Revoke consent and close your account
  • Lodge a complaint with a supervisory authority

7. Security

TLS 1.3+ in transit, AES-256 at rest (Supabase PostgreSQL). bcryptjs password hashing. Rate limiting + Turnstile bot protection. Report vulnerabilities to security@rankhub.app.

8. Contact

For privacy inquiries, deletion requests, or security concerns, contact privacy@rankhub.app.