Privacy Policy

Last updated 2026-08-24

This explains what whowins.lol collects when you use whowins.lol, why, and what you can ask us to do about it. We have tried to keep it specific rather than general.

If you only browse or vote

We do not ask you to sign up, and we do not use advertising or analytics cookies.

A one way fingerprint of your network address, browser and language

Stored as a hash, not as the address itself. Used to count one vote per person and to spot automated voting. We cannot reverse it back into your address.

Country code

Sent by our network provider. Used to spot unusual voting patterns.

Outbound clicks

When you click through to a listed product we record that a click happened, with the same one way hash, so the product owner can see how much traffic we sent. Repeat clicks from the same visitor within an hour are not counted again.

Bot check

Cloudflare Turnstile runs before a vote is counted. It is a privacy focused check that does not profile you across sites.

We set one cookie, and only to remember whether you chose the light or dark theme. It carries no identifier.

If you add a product

Your email address

Used to tell you when somebody contests your listing position and to send the result. Never shown on the site, never sold, never used for marketing you did not ask for.

Your product name, domain, description, category and logo

Public by design. That is the listing.

A verification token

A random value you place in DNS or in a file, to prove the domain is yours. It stops working once verified.

If you pay

Payments are processed by a merchant of record, which appears as the seller on your statement and handles tax. We never see or store your card details. We keep the transaction reference, the amount, the currency and which listing position it was for, so we can support you and issue refunds.

How long we keep things

• Vote hashes and click records: kept while the matchup page exists, because they are what the public counts are built from.
• Failure logs: capped at the most recent 500 entries; older ones are deleted automatically.
• Product listings and matchup pages: kept until you ask us to remove them.
• Payment records: kept as long as we are required to keep them for accounting.

Who else sees it

Our infrastructure runs on Cloudflare, which processes requests and stores the database and images. The merchant of record processes payments. Email notifications are sent through our email provider. We do not sell data and we do not share it for advertising.

Your choices

Write to legal@whowins.lol to get a copy of what we hold about your listing, to correct it, or to have your product and its history removed. We reply within two business days. Removing a listing also removes it from public leaderboards.

Children

The service is not aimed at children and we do not knowingly collect data from them.

Changes

If we change this policy we update the date at the top. Material changes will also be noted on the site.