Privacy
Privacy Policy
Last updated: 2026-08-16 · Version: v1.0
Our principle: collect less, guess less.
1. Data Controller
Chen Xi (individual). Privacy contact: fantasy19.hit@gmail.com. DPO: not appointed.
2. Personal Information We Collect
Provided by you: feedback form content (feedback type, description, page URL, related domain, page language, submission time; contact details are optional) — processed only through Formspree; account information (once registration launches: email address, sign-in method); payment information (we do not store full card numbers; card data is handled by the payment processor).
Collected automatically: anonymous visit analytics (see Section 4).
3. How We Use Data
| Purpose | Legal basis |
|---|---|
| Providing and improving the Service | Contract performance / legitimate interest |
| Processing feedback and verifying data | Legitimate interest |
| Payment settlement (once launched) | Contract performance |
| Statutory compliance obligations | Legal obligation |
| Marketing communications (if any) | Your consent |
Feedback is used to verify data and improve the product; it does not automatically change rankings.
4. Cookies and Tracking Technologies
- Vercel Web Analytics: records anonymous page views, referrers, region, device, and browser category, and uses no cookies;
- Google Analytics 4: measures page visits and traffic sources and uses cookies to recognize returning visitors; data is processed under the Google Privacy Policy. You can opt out by disabling cookies or installing Google's official opt-out add-on.
We use no other marketing tracking.
5. Sharing and Disclosure
We do not sell your personal information. We share it only in these circumstances: service providers (feedback form: Formspree; payment card data handled entirely by the PCI-DSS-compliant Waffo Pancake and not stored on our servers); legal requirements; business transfers; your explicit consent.
6. Data Security
Site-wide HTTPS/TLS; passwords (once account features launch) stored as encrypted hashes; least-privilege access. Credentials are injected only through local environment variables or GitHub Secrets and never enter the code repository or static pages. If we discover a data breach, we will notify affected users within 72 hours of discovery.
7. Retention Periods
| Data | Retention |
|---|---|
| Account information | No more than 90 days after deletion |
| Transaction records | 5 years as required by law |
| Feedback records | 12 months |
| Security logs | 90 days |
8. Your Data Rights
You have the rights of access, correction, deletion, restriction of processing, data portability, objection to processing, and withdrawal of consent, as well as the right to lodge a complaint with a data protection authority. Send requests to fantasy19.hit@gmail.com; we respond within 30 calendar days.
9. Marketing Communications and Unsubscribe
Marketing emails require your consent; you may unsubscribe at any time via the unsubscribe link in the email or in your account settings. Service-essential notices (billing, security) are unaffected by unsubscribing.
10. Cross-Border Data Transfers
The Service is deployed on Vercel (with nodes in regions including the United States). Cross-border transfers rely on Standard Contractual Clauses (SCC) or equivalent protection commitments from the recipient.
11. Protection of Minors
The Service is intended for users aged 18 and above; we do not knowingly collect information from minors.
12. Third-Party Links and Services
This site contains links to third-party websites (such as the sites included in the rankings); their privacy practices are their own responsibility. Our data collection accesses only public HTTP pages and respects robots rules and per-host request intervals.
13. Policy Changes
Material changes are announced 15 days in advance via an on-site notice or email, with the "Last updated" date revised accordingly.
14. Contact Us
Privacy email: fantasy19.hit@gmail.com · Online feedback: https://gulliver.watch/feedback · Chen Xi (individual)