Privacy Policy
thetop.lol keeps as little personal data as a paid board possibly can. No advertising pixels, no mailing list, and no analytics at all unless you agree to it first.
Who is responsible
The controller of your personal data is FUTURE FIRST ALEKSANDRA GAWĘDA SPÓŁKA KOMANDYTOWA, a limited partnership (spółka komandytowa) registered in Poland, with its registered office at Chmielna 2/31, 00-020 Warsaw, Poland. We operate thetop.lol.
- Registry number (KRS)0001242611
- Tax number (NIP)5253091030
- Statistical number (REGON)544815459
- Contactkontakt@futurefirst.pl
What we collect, and why
- Your listing. The URL or @handle you submit, the description you write and the amount you paid. This is public by design: it is the board. Legal basis: performance of our agreement with you.
- Your email address. Passed to us by Stripe after a completed payment. We use it only to identify the owner of a listing when there is a refund, a dispute or a takedown request. We never send marketing email and we have no mailing list. Legal basis: performance of our agreement and our legitimate interest in handling disputes.
- Payment records. Amount, currency, time, Stripe identifiers and the status of the transaction. Card numbers never reach our servers, Stripe handles them. Legal basis: our legal obligation to keep accounting records.
- Technical data at checkout. Your IP address and browser user agent, stored with the payment attempt. This lets us rate-limit abuse and answer chargebacks with evidence. Legal basis: our legitimate interest in preventing fraud.
- Click counts. When someone clicks a listing we record the listing and the time. We do not store who clicked: no IP address, no identifier, no profile. Legal basis: our legitimate interest in showing listing owners that a spot is worth paying for.
Analytics, only if you say yes
We use Google Analytics to count visits and see which pages people open. It sets cookies, so we ask first. The script does not load at all until you click Allow, and if you decline, nothing is sent to Google and no analytics cookie is created. The board works the same either way.
- Legal basis: your consent. You can withdraw it at any time by clearing this site's data in your browser, which brings the question back.
- What Google receives: pages viewed, approximate location from a truncated IP address, device and browser type, and how you arrived. We enable IP anonymisation.
- What we switch off: advertising storage, ad personalisation and ad user data are set to denied, so this data is not used to build advertising profiles.
- Google is an independent controller for the data it collects. See its privacy policy at policies.google.com/privacy.
What we do not do
- No advertising pixels, no retargeting, no social media trackers.
- No cookies at all before you consent. Your light or dark theme choice sits in your browser and never leaves your device.
- No profiling and no automated decisions with legal effects.
- No selling, renting or sharing of personal data with data brokers.
- Favicons on the board are fetched by our server, not your browser, so displaying a listing does not reveal your IP address to the site it points to.
Outbound links
Clicking a listing sends you to the URL its owner submitted, with ?utm_source=thetop appended so they can see the traffic came from us. We strip the referrer. What that website then does with your visit is governed by its own privacy policy, not ours.
Who else processes your data
- Stripe - payment processing. Stripe is an independent controller for card data and its own fraud prevention. See stripe.com/privacy.
- Vercel - hosting and content delivery.
- Neon - the database that stores listings and payment records.
These providers operate servers in the United States, so your data may be transferred outside the European Economic Area. Those transfers rely on the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.
How long we keep it
- Listings - until they are removed from the board, and up to 90 days afterwards in backups.
- Payment records - five years from the end of the accounting year, because tax law requires it.
- Checkout technical data - 12 months, which covers the window for chargebacks.
- Click events - 24 hours in raw form. After that only an aggregate counter survives, and it identifies nobody.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing we base on legitimate interest. Write to kontakt@futurefirst.pl and we will answer within 30 days.
Two things we cannot delete on request: payment records we are legally required to keep, and the fact that a listing was publicly displayed while it was paid for. Everything else goes.
If you think we handle your data badly, you can complain to your local data protection authority. In Poland that is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
Listings that are not yours
Some listings were added by us for free and marked Unclaimed. Those companies never applied and paid nothing. If one points at your site and you would rather not be listed, use the "not your listing?" button on the row. It comes down immediately, with no email and no questions.
Children
thetop.lol is a service for businesses and creators, not for children. We do not knowingly collect data from anyone under 16.
Changes
When this policy changes we update the date at the top. Material changes will also be announced on the board itself, because we have no mailing list to notify you through.