Privacy policy
Effective August 25, 2026. Last updated August 25, 2026.
whereto.lol is built to know as little about you as possible. No accounts, no tracking profiles, no ads. This policy explains what we do collect, why, and what you can ask us to do about it.
What we collect
- When you vote: the country you chose, the amount, and the optional name and message you typed. Name and message are shown publicly on the leaderboard, so don't include anything private in them.
- Payments: handled entirely by Stripe. We never see or store your card details. Stripe collects your email to send a receipt, subject to Stripe's privacy policy.
- While you browse: a random, anonymous identifier created in your browser for this session. We use it for the "online now" counter, which we delete within minutes of you leaving, and we keep one row per identifier so we can count how many visits the board has had. Alongside it we store the two-letter country our hosting provider works out from your connection. We do not store your IP address, and none of this is linked to your name, your email or your payment.
- Analytics: aggregate page-view statistics from our hosting provider and from Vemetric, which we use to understand how the site is doing. No cross-site profiles and no advertising identifiers.
Why we are allowed to do this
- To run the vote you asked for and take payment, we process what is needed to perform that contract with you.
- For anonymous counting and basic analytics we rely on our legitimate interest in knowing whether the site works and how many people use it, kept to the minimum that answers the question.
- Vote records, including any public name and message, are kept for as long as the board exists, because the board is all-time by design. Payment records are kept as long as tax and accounting rules require. Session identifiers used for the online counter are deleted within minutes.
What we don't do
- No selling or sharing of personal data with advertisers.
- No tracking cookies or cross-site profiles.
Third parties
- Stripe (payments), Vercel (hosting and aggregate analytics), Neon (database) and Vemetric (analytics) process data to run the site. They may process it outside your country, under the safeguards their own agreements provide. Travel links open third-party sites governed by their own policies.
Your rights and choices
- Want a public name or message removed or changed? Email support@whereto.lol and we'll take care of it.
- Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to complain to your local data protection authority. Email the same address and we will respond within one month.
- We may need to keep a record of a payment even after removing a public name, because tax and anti-fraud rules require it.