Privacy Policy

This policy describes exactly what Make Ranks does with your data — no more, no less. Make Ranks is responsible for your personal data (contact details at the end of this page). The short version: we do not sell your data and we do not share it with advertising companies. Ever.

1. What we collect and why

• Account data — your email and a hashed password, to operate your account, plus the version of these terms you accepted and when. Passwords are stored only as one-way bcrypt hashes; we cannot read them. If you choose Continue with Google, Google tells us your email address and that it is verified; we keep only the email, and never see your Google password.
• Trial-fairness data — a device fingerprint hash taken at signup, used solely to enforce one trial per person and to protect against abuse.
• Billing data — checkout, payment and invoicing are handled by our merchant of record, Polar, with card payments processed by Stripe on Polar’s behalf. We give Polar your email, an internal account ID (so your subscription links to your account) and your IP address at checkout (for fraud prevention and tax). We receive back your plan, subscription status and billing dates — never your full card number.
• Usage counts — how many exports you have used in the current billing period, and which library topics you opened this month, to apply your plan’s limits.
• Your projects stay on your device — the editor runs in your browser and videos render on your own computer. We do not receive your project files, data sheets, uploaded images or exported videos. For My Projects in the Studio we keep, for each project you save: its name, file size, the date, which computer it was saved on (a label such as “Windows · Chrome”) and a small preview picture. Remove any entry there at any time; all of it is deleted with your account. Your browser may keep a copy of recent projects on your own computer, so they reopen in one click, and the templates you make from them (“My templates”); those stay on your computer too.
• Referrals and influencer links — if you signed up through a friend’s referral link or a creator’s link or discount code, we record which one, so they get their reward or commission. A creator’s monthly statement shows how many customers they brought and what those paid; we never give them your email.
• Feedback — messages you send with the Feedback button, with your email, plan and the page you were on, so we can answer and improve the product. Deleted with your account.
• Waitlist — if you join the waitlist before we open, we keep your email (and the plan you were looking at, if any) only to tell you when Make Ranks opens and about the launch offer. Every email has a one-click unsubscribe; ask us and we delete it at once.
• Server logs — our hosting provider keeps standard request logs (such as IP address and pages requested) for a short period, for security and debugging. We do not run analytics or tracking scripts.
• Attempt counters — to stop password guessing and spam, we count sign-in, sign-up and form attempts per IP address and per account. The counters hold only a scrambled form of these, never the address or email itself, and expire within an hour.

2. What we do NOT do

• No sale of personal data, to anyone, for any price.
• No sharing with advertising or data-broker companies.
• No third-party advertising pixels or trackers on the site.
• No reading of your project content for anything except serving it back to you.

3. Who processes data for us

Like every web service, we use infrastructure providers who process data on our instructions: hosting (Vercel), database and sign-in (Supabase), attempt counters (Upstash), payments, tax and invoicing (Polar, as merchant of record, with Stripe processing cards) and an email-delivery provider for account emails such as password resets. Each receives only what its job requires. As merchant of record, Polar is also responsible for your payment data under its own privacy policy.

4. Retention & deletion

Account data is kept while your account exists. Email support from your account’s address to delete your account, and personal data is removed within 30 days, except records we must keep for tax or fraud prevention. Trial-fairness hashes are kept to prevent repeat trials.

5. Your rights

You may request a copy, correction or deletion of your personal data at any time by emailing support. If you are in a jurisdiction with statutory privacy rights (such as the EU/GDPR or California/CCPA), those rights apply and we honor them.

6. Security

Passwords hashed, sessions in secure httpOnly cookies, transport encrypted with TLS, server-side validation on every input, database row-level security, and rate limiting against brute force. Details on the Security page.

7. Changes

If this policy changes materially, we will notify you in the app or by email before the change takes effect. This policy is written to match the site’s actual behavior — if we add a tool that touches personal data, the policy is updated first.

Contact: support@makeranks.com · makeranks.com.