Privacy Policy

This Privacy Policy explains what data THE WALL collects, why, and how it is handled.

Data we collect: for signed-in users, your email address and display name (via Supabase Auth); for every visitor, an anonymous session identifier stored in a cookie; vote records associated with either; and, if you purchase a paid feature such as the Golden Frame, payment details processed directly by Stripe — THE WALL never stores your card number.

Purposes: operating voting and rankings, enforcing vote limits and preventing abuse, processing payments for paid features, responding to proposals/reports/claims, and generating aggregate, non-identifying statistics shown publicly (e.g. rankings, trends).

Legal bases, where EU/UK data protection law applies: performance of a contract (providing the service you use), legitimate interest (abuse prevention and service security), and consent or legal obligation where either applies (e.g. certain cookies).

Service providers: THE WALL uses Supabase (database and authentication) and Stripe (payment processing) to operate the platform. These providers process data on our behalf under their own privacy and security terms.

Retention: account and vote data is kept for as long as your account is active or as needed for the purposes above, and may be kept longer where required for fraud prevention, legal compliance, or dispute resolution.

International transfers: our providers may process data outside your country of residence, including outside the EU/UK, under the safeguards those providers offer (e.g. standard contractual clauses).

Your rights: depending on your location, you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. Contact us to exercise these rights.

Minors: THE WALL is not directed at children and we do not knowingly collect data from children under the age required by applicable law to consent to data processing on their own behalf.

Security: we apply reasonable technical and organizational measures (e.g. access controls, encrypted connections) to protect your data, but no system is completely secure.

We do not sell personal data.