Privacy/privacy

what we store

A salted hash of your IP address (sha256 of IP + salt), never the raw IP. It is pseudonymous data, not anonymous data. We use it to rate-limit free actions (nominations, signals), to count unique visitors for the corner badge, and to investigate abuse. No raw IPs, no referrer URLs, no browser fingerprints.

One anonymous cookie (tig_anon, a random id, valid a year, httpOnly) identifies "you" between hits on the same device — it is what makes the graveyard's attacker count distinct. It contains no personal information.

what we do with events

A minimal server-side event log records that purchases were started and confirmed (with their outcome), and that nominations and signals happened. Nothing links an event to a name or an account — there are no accounts. The log exists to measure how the site actually converts, nothing else.

payments

Payments are processed entirely by Dodo Payments, which acts as the merchant of record for EU VAT. We never see or store card details. Dodo receives the purchase amount and its own payment id; their privacy policy applies to the checkout page.

how long we keep things

Visitor rows and purchase records are kept indefinitely — the visitor count and the graveyard are permanent by design. The event log is analytics and is kept too. You can ask us to delete or correct anything at any time; hits that were already applied cannot be un-applied, by the nature of the product.

your requests

For removal, correction, or any privacy question, contact amantwd@gmail.com. We answer.