Privacy policy

Data collected

Account: email address, hashed password, language, creation and sign-in dates.

Profile: brand name, logo, category, country, description, website address.

X account: account name, display name, image, category, country, description.

Games: scores, game event logs, hashed IP address, declared browser.

Payments: amount, status, provider reference. No banking data passes through Rankathlon or is stored by it.

Browsing: anonymous visit statistics — pages viewed, source, device type, estimated country and city — with no cookie and no stored IP address.

Purposes

Providing the service: account, game, ranking, directory.

Guaranteeing ranking integrity: game logs allow a score to be recomputed and automated behaviour to be detected.

Handling support requests and accounting obligations.

Measuring site traffic to improve it, from anonymous statistics.

Sending automatic service emails: ranking alerts and reminders about an unpublished profile. At most two per week, turned off in one click from each email or the “My notifications” page.

Informing you, through rare announcements, of important changes to the service: a new game, a new feature, a change to the terms of use. They can be turned off in one click from each of them or the “My notifications” page.

Suggesting, in those alerts, to boost one’s position: only if the player has accepted it in their preferences.

IP addresses

IP addresses are never stored in the clear. Only a hash is recorded, to limit abuse and deduplicate outbound clicks.

Public data

Public: brand name, logo, category, country, scores and rank. The website address is public only for an activated profile.

For an X account, public: account name, display name, image, category, country, scores and rank. The link to the account is public only for an activated profile.

Never public: email address, payment data, technical logs, and moderation details.

Retention

Account and profile: until a deletion request.

Game logs, with the hashed IP address and declared browser of the game: 90 days, except for scores at the top of the rankings or subject to a flag, kept for the duration of the review.

Hashed IP address of an outbound click: 90 days.

Payments: as required by applicable accounting obligations.

Visit statistics: 25 months.

Your rights

Access, rectification, deletion, portability and objection. Requests are made by email from the account address.

Deleting an account may leave anonymised payment records in place, due to accounting obligations.