Privacy Policy

This Privacy Policy explains what information RankHall ("we", "us", or "our") collects, how we use it, and the choices you have. It applies to the RankHall website and Service. By using RankHall, you agree to the practices described here.

We collect only what we need to run the Service:

• Account information — your email address, username, and (for email sign-up) a password that we store only in salted, hashed form. If you sign in with Google, we receive your name and email address; we do not import your Google profile picture.
• Profile details you choose to add — display name, bio, location, time zone, avatar image, and social links.
• Your ranking activity — the items you add, your head-to-head comparisons, Elo scores, rankings, reviews, comments, likes, follows, achievements, streaks, tournaments, and lists.
• Imported data — if you use our Letterboxd or TrueAchievements import, the contents of the file you choose to upload.
• Support and feedback — the subject, message, and any optional contact email you include when you contact us.
• Technical data — your IP address and browser user-agent, which we store with your login sessions for security, along with standard server logs.

We use a single essential cookie to keep you signed in. In production this cookie is secured with the __Host- prefix and the Secure and HttpOnly flags. We do not use advertising or cross-site tracking cookies.

When analytics are enabled, we use Umami — a privacy-friendly, cookieless analytics tool that helps us understand aggregate usage, such as which pages are visited. Umami does not use cookies, does not collect personal data, and does not track you across other websites.

We use Sentry to capture crash and error reports so we can keep the Service reliable. We scrub sensitive information from these reports before they are sent, and they are used only to diagnose and fix problems.

We use your information to:

• Provide the Service and calculate your rankings.
• Create and secure your account and keep you signed in.
• Respond to your feedback and support requests.
• Send account-related emails, such as email verification and password resets.
• Send the optional weekly summary, only if you opt in.
• Monitor, maintain, and improve the reliability and security of the Service.

We do not sell your personal information. We share information only in these limited cases:

• Service providers who help us operate RankHall — our hosting provider (DigitalOcean), error monitoring (Sentry), and Google (only if you choose to sign in with Google).
• Other users — content you make public, such as your profile, reviews, comments, and rankings, is visible according to your visibility settings.
• Legal reasons — when required by law, or to protect the rights, safety, and security of RankHall and its users.

By default your profile can be viewed by others. You control what is shared using the privacy settings in your account, including a master public/private toggle and individual switches for your rankings, statistics, and recent activity. You can make your profile private at any time.

Information about games comes from IGDB, and information about movies and TV shows comes from TMDB. This is data about media titles, not about you. RankHall uses the TMDB API but is not endorsed or certified by TMDB.

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete the personal data associated with it, except where we must retain certain records to comply with legal obligations or in routine backups that are overwritten over time.

You can:

• Access and update your profile information in your account settings.
• Request an export of your data from your settings.
• Delete your account, which removes the personal data associated with it.
• Opt in or out of the weekly summary email at any time.
• Review and revoke active login sessions, and change your password.
• Contact us at info@rankhall.com to exercise any privacy right.

We protect your information using measures such as hashed passwords, secure and HttpOnly session cookies, session management, and encryption in transit (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

RankHall is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

RankHall is operated from the United States. If you access the Service from outside the United States, your information may be processed and stored in the United States, where data-protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you through the Service.

Questions or privacy requests? Email us at info@rankhall.com or reach out through our Support page.