Privacy policy
1. Who is the controller
The controller of personal data processed in the Richmilioner service is [FILL IN: operator], [FILL IN: address]. Contact for all data matters: [FILL IN: email].
2. What data we process
- Ranking entry - the nickname, optional message and country you enter in the form. They are publicly visible in the ranking and statistics together with payment amounts and dates. Do not include sensitive data about yourself or any data about other people.
- Payment data - amount, currency, date, selected language and transaction identifiers assigned by the payment provider.
- Payment details - card or other payment method details, e-mail address and billing details are provided directly to the payment provider Stripe. We do not store them in the Service's database; we can see them in the Stripe dashboard only as far as needed to handle payments, refunds and complaints.
- Technical data - IP address and browser information, processed on every visit by the hosting provider (Cloudflare) to deliver the site, protect it against attacks and abuse, limit payment attempts and determine your approximate country (default currency and country in the form). We do not store IP addresses in the Service's database; they may appear in short-lived technical logs.
- Correspondence - if you write to us (e.g. a complaint or a content notice), we process your e-mail address and the message.
3. Purposes and legal bases
- Performance of a contract - displaying your entry, handling payments, refunds and complaints (Art. 6(1)(b) GDPR).
- Legal obligations - accounting, tax and responding to lawful requests from authorities (Art. 6(1)(c) GDPR).
- Legitimate interests - security of the Service, preventing fraud and abuse, content moderation and handling notices, establishing, exercising and defending legal claims (Art. 6(1)(f) GDPR).
Providing data is voluntary, but without a nickname, country and payment you cannot buy a place in the ranking. We do not make decisions about you based solely on automated processing and we do not profile you.
4. Who receives the data
- Stripe Payments Europe, Limited (Ireland) - payment provider. It processes payment data as an independent controller under the Stripe privacy policy.
- Cloudflare, Inc. - hosting, content delivery network, database and attack protection. It processes data on our behalf under a data processing agreement.
- Our accounting and legal service providers - as far as necessary for their services.
- Public authorities - where required by law.
- Everyone visiting the Service - as regards ranking entry data (nickname, message, country, payment amounts and dates).
5. Transfers outside the EEA
Stripe and Cloudflare may also process data outside the European Economic Area, including in the USA. This is based on a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the Commission.
6. How long we keep data
- Ranking entry - for as long as the Service operates, because the continuous display of the entry is the essence of the service. On request we will anonymise your entry (the nickname and message are replaced with "Anonymous", while the amount still counts towards the ranking).
- Payment data and accounting records - for 5 years from the end of the calendar year in which the tax payment deadline expired.
- Technical logs - for a short period set by the hosting provider, usually no longer than a few days.
- Correspondence - until any claims become time-barred.
7. Your rights
You have the right to access your data, to rectification, erasure or restriction of processing, to data portability and to object to processing based on legitimate interests. To exercise them, write to [FILL IN: email]. To match an entry to you, we may ask for details from your Stripe payment receipt.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warszawa) or with the supervisory authority in your country of residence.
8. Cookies and browser storage
The Service does not use analytics or advertising cookies or tools. We store in your browser only the settings you ask for:
- the
langcookie - selected language (12 months), - local storage
theme- light or dark theme, - local storage
currency- display currency.
They are strictly necessary for the features you use, so they do not require consent. You can delete them in your browser settings. The Stripe payment page may set its own cookies, e.g. for fraud prevention, under Stripe's rules.
9. Changes to this policy
We may update this policy, e.g. when providers or laws change. The current version, with its effective date, is always available on this page.