سياسة الخصوصية

1. Controller and contact

The controller is the operator of Richest Country identified in the Legal notice. Privacy requests: contact@richestcountry.lol.

2. Data processed

The service processes a browser-generated supporter identifier, nickname, optional X handle, selected country, amount, currency, Stripe checkout and payment identifiers, refund status and timestamps. The public interface exposes the nickname, optional X handle, supported countries, totals and boost counts.

Stripe processes payment and billing data under its own privacy notice. Vercel may process IP address and technical logs to host and secure the site. The application does not store the raw IP address in its database. To prevent automated checkout abuse, it temporarily stores a keyed one-way hash derived from the IP address.

3. Purposes and legal bases

Data is used to perform purchases and display the ranking (contract), prevent fraud and secure the service (legitimate interests), meet accounting and legal duties (legal obligation), and answer requests (legitimate interests or legal obligation).

4. Recipients and transfers

Data is accessible only to the operator and service providers needed to run the service, principally Stripe for payments, Supabase for database and realtime features, and Vercel for hosting. Some processing may occur outside the EEA under the safeguards offered by those providers.

5. Retention

Public supporter and contribution records are retained for the life of the ranking so totals remain coherent. Transaction evidence is retained for applicable accounting and limitation periods, which may reach ten years. Checkout anti-abuse hashes are purged after their 48-hour window during checkout processing. Technical provider logs follow each provider’s retention settings.

6. Local storage, analytics and cookies

The site stores theme, language-related navigation preferences, supporter identifier, nickname and optional X handle locally in the browser. These are functional storage items, not advertising trackers. Vercel Web Analytics measures anonymised page views and visitors without advertising cookies. Provider checkout pages may use their own necessary technologies.

7. Your rights

Depending on the applicable law, you may request access, correction, deletion, restriction, portability or objection. Write to contact@richestcountry.lol. Identity evidence may be requested when necessary. You may also lodge a complaint with the CNIL or your local supervisory authority.

8. Security and changes

Reasonable technical and organisational safeguards are used, but no online service can guarantee absolute security. Material changes will be dated on this page.