Skip to main content

Privacy Policy

What data Overtop collects, why, and who processes it

Overview

Overtop has no consumer accounts, but "no login" does not mean "no personal data". This policy describes what we collect and why.

What we collect

  • Payment data: your email address, billing details, and payment identifiers are collected and processed by Stripe when you pay. We never see or store your card number. We store the Stripe Checkout Session and PaymentIntent identifiers, the amount paid, and the email Stripe provides to us, so we can locate your payment, provide support, and handle refunds or disputes.
  • Submission data: the URL or X handle you submit becomes part of a public listing, together with its cumulative paid total and click count.
  • Technical data: IP address, user-agent, and request logs are processed by our hosting provider (Cloudflare) for security, rate limiting, and abuse prevention.

Why we process it

  • To provide the paid placement service and display the public leaderboard.
  • To fulfill, verify, refund, and defend payments (legal/contractual basis).
  • To prevent fraud, card testing, and abuse (legitimate interest).

Processors

  • Stripe — payment processing (stripe.com/privacy)
  • Cloudflare — hosting, DNS, security, logs (cloudflare.com/privacypolicy)

Retention

Order and payment records are retained for as long as required for tax, accounting, and dispute-defense purposes. Public listings remain on the leaderboard indefinitely unless removed under our Rules.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us at support@overtop.lol and include the email address you used at checkout.

Changes

We may update this policy from time to time. The date above reflects the latest revision.