Privacy policy

1. What we collect

• When you pay: your email address and phone number, which Stripe collects at checkout and passes to us, and the record of each payment (amount, date, listing). Card details stay with Stripe — we never see them.
• Your listing: brand name, logo, descriptions, website, country and category. These are public by design — they are the listing.
• When you use the site: your IP address, briefly, to stop abuse (for example too many requests a minute). When we start counting visits to listings, we keep only a scrambled (hashed) form of the IP address, never the address itself.
• A cookie that remembers the language you chose (wtr-lang). We use no advertising cookies or ad trackers.

2. Why we use it

Giving your email and phone number is needed to pay for a listing; without them we cannot accept the payment.

• to process payments and assign ranks;
• to send receipts and service messages — for example when another listing outbids yours;
• to contact a weekly champion about their free promotion (by email or phone);
• to prevent fraud and abuse, and to keep the records the law requires.

3. Who we share it with

We never sell your personal data or show your email or phone number publicly. We share it only with the services that run WorldTopRank for us, each bound to protect it:

• Stripe — payments;
• Supabase — our database, hosted in Singapore;
• Hostinger — our web hosting;
• Resend — sending our emails, such as rank alerts.

4. Data outside Malaysia

Some of these services store or process data outside Malaysia (for example in Singapore, the United States or the European Union). We use providers with recognised safeguards for personal data.

5. How long we keep it

Payment records are kept for 7 years, as Malaysian tax law requires. Contact details are kept while you have a listing and then for those 7 years with the payment records. Rate-limit records last minutes.

6. Your rights

You may ask for a copy of the personal data we hold about you, ask us to correct it, or tell us to stop using it for anything other than the payment records the law requires us to keep. Email support@worldtoprank.com; we reply within 21 days. We may ask you to confirm the request comes from the payment email.

7. Security

Our database is not reachable from the public internet API; only our server can read it. Connections are encrypted (HTTPS).

8. Children

WorldTopRank is for businesses. You must be 18 or older to pay for a listing.

9. Changes and contact

We will update this page when our practices change. Questions or requests: support@worldtoprank.com.