Privacy Policy

Information We Process

We do not collect or store any personal information from you. Here's a breakdown of the data we handle:

• List URLs: You provide us with public URLs to your playlists or lists from services like Spotify, Letterboxd, or IMDb. We use these URLs solely to fetch the contents of the list for you to rank. These URLs are processed in real-time and are never stored on our servers.
• List Content: The content of your lists (e.g., song titles, movie titles) is fetched from the respective services and processed in your browser to enable the ranking functionality. This data is not stored on our servers.

How We Use Your Information

The information we process is used exclusively to provide the core functionality of the List Ranker, which is to allow you to rank items from your lists. We do not use this information for any other purpose, such as analytics, advertising, or tracking.

Cookies and Local Storage

We do not use cookies for tracking or analytics. We do use your browser's Local Storage for the following essential purposes:

• To save your ranking progress in your browser so you can continue later.
• To remember if you have dismissed the cookie notice.

This data is stored only in your browser and is never transmitted to our servers.

Visit Logging

When you load a page on this site, a small server-side log entry is written. The log is used only by me, the site owner, to understand roughly who is visiting and which pages they read. Specifically:

• What is recorded: the page path, the referring URL (if any), the timestamp, your approximate location (country, region, city, time zone) derived from your IP address by my hosting provider, and basic device information (browser, operating system, language) extracted from your User-Agent header.
• No cookies, no local storage, no fingerprinting. Nothing is stored on your device by the visit logger. You will see no consent banner because none is required for this kind of server-side logging.
• Session grouping: to know whether two pageviews came from the same person on the same day, a short-lived token is computed by hashing your IP address together with your User-Agent and a daily-rotating server secret. Your raw IP address is not stored. The token is unlinkable across days.
• Retention: log entries are kept for as long as I find them useful and may be deleted at any time. They are stored in a private Supabase database that only I can read.
• Lawful basis (GDPR): legitimate interest in understanding traffic to my own personal website. You may object by emailing me; I will delete entries that correspond to your visits on request.

Third-Party Services

When you provide a URL, our backend service communicates with the respective third-party API (e.g., Spotify, Letterboxd) to fetch the list data. We are not responsible for the data practices of these services. We encourage you to review their privacy policies.

Your Rights

Under the GDPR, you have rights over your personal data. Since we do not store any of your personal data, most of these rights are not applicable in the traditional sense. However, you have the right to:

• Not use the service if you do not agree with this policy.
• Clear your browser's local storage to remove any saved ranking progress.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page.