Privacy

The short version

We store the minimum needed to run a live leaderboard. We never see your card details — Polar handles the entire payment. Signing in shares only your public X profile, and what the public sees of it is your call — anon is the default. We never sell data. Analytics, when on, are Vercel's cookieless aggregate counts — no ad trackers, no cross-site profiling.

What we store

• Anonymous client id — a random string generated in your browser (localStorage) used to route live updates and confirm your own pump. It is not tied to your identity.
• Your X profile (if you sign in) — every action (pump, choke, submit) requires signing in with X. We receive and store only your public profile: handle, account id, avatar URL. How much of it the public sees is your call per action (see "display choice" below).
• Display choice — every action defaults to anonymous display. Only if you flip the "show me" switch do your @handle and avatar ride the live feed, tickers, and receipt pages. Off = you show as anon.
• Moderation copy of your identity — even when you display as anon, your sign-in identity stays attached to your receipts internally, never shown publicly. It exists for one reason: abuse handling and payment-dispute audit (e.g. reversing credits for unlawful messages). It is not sold, shared, or published.
• If you pump: truncated email + one-way hash — Polar tells us the email attached to your checkout. We keep only (a) a one-way hash of it, which becomes your private pumper-page address, and (b) a truncated form like j***@gmail.com, shown on legacy donor records that predate sign-in. Your full email is never written to our database and never displayed. If you opted into showing your @handle, that shows instead.
• Pumper page data — your aggregated totals (amount pumped, pump count, last tier, last pump time) and the list of projects you pumped. Public by design, same as the board itself.
• Public pump records — for every paid pump: the project, the tier, the amount, and the time. These power the leaderboard and charts and are visible to everyone. That is the point of the site.
• Choke counts — anonymous counters. We also keep the project domain a visitor arrived from, if any, for aggregate traffic stats — no personal data in it.
• Consent flags (on your device only) — whether you accepted the current terms version, or declined the consent dialog. A decline keeps that device in read-only mode: browsing works, but money features and sign-in stay disabled.
• IP address — IP addresses arrive hashed: a one-way hash of your IP rides receipts for abuse prevention, audit, and rate limiting. Raw IPs never hit the database. Hashed or not, we don't sell it, publish it, or profile you with it.
• Login diagnostics — OAuth callback outcomes (success handle or provider error string) land in an internal diagnostics table, auto-purged after 30 days. Never public.

Project submissions — public info only

Every project listed on this leaderboard enters it through a voluntary user submission: the submitter provides the domain (and optionally a name, tagline, or emoji), and we may read publicly available information from that domain — such as its page title, meta description, or favicon — to fill in the listing. We collect publicly available information only. We never access private pages, authenticated content, paywalled material, or anything a site did not already publish openly to the entire internet.

Legal declaration: all submitted project information is provided by third-party submitters, not by us. We do not verify, edit for accuracy, monitor continuously, or endorse any submission. We expressly disclaim — and accept no liability whatsoever for — the accuracy, truthfulness, completeness, legality, ownership, or fitness of any user-submitted content, including the identity of the submitter and their right to submit that domain. A listing is a pointer to something someone asked us to rank. It is not our statement, our recommendation, or our claim about any site, person, or product. If you believe a submission is false, infringing, or unlawful, contact us: we may investigate and remove it at our sole discretion, but we are under no obligation to pre-screen and no warranty of removal is given.

What we never store

• Card numbers, bank details, or full payment credentials — these go directly to Polar, never to us.
• Passwords — never. Sign-in with X stores only your public profile (handle, account id, avatar) inside a signed login cookie on your device; we keep no passwords and no X access tokens.
• Your full email address — we keep only the truncated display form and a one-way hash.
• Tracking cookies or advertising identifiers.

Third parties

• Polar (polar.sh) — merchant of record for payments. Processes your payment and may store your email/receipt per their own privacy policy.
• Vercel — hosting and edge CDN (request logs); their Analytics, when enabled, is cookieless and aggregate-only.
• X (x.com) — identity provider when you sign in to choke or submit. We receive only your public profile (handle, account id, avatar); any access tokens are discarded immediately.
• Supabase — managed Postgres database hosting the leaderboard data described above.

Your controls

• Stored preferences (theme, client id) live only in your browser and can be removed like any site data.
• Display is per-action and defaults to anon: leave the "show me" switch off and nothing public ties the action to you. Amounts and project totals remain public by design — a public leaderboard cannot honor deletion of an aggregated total without breaking the product.
• Contact us for anything else and we will do our best within the limits of a public experiment. Sign-in-linked records (the internal identity copy on anonymous receipts and consent logs) can be detached on request — email reports@outchoke.lol and we'll break the linkage; public aggregate totals themselves stay for board integrity.

Changes

If this policy changes materially, the updated date at the top changes with it. Questions: open an issue or reach the operator of the deployment you are using.