Privacy & Data Policy

This page explains what 2rupeespeople.lol collects, why, and how long it's kept. It describes what the site actually does today. Last updated 27 August 2026.

What this site is

2rupeespeople.lol is a public leaderboard. You pay to place a product, website or social profile on it, and the amount you pay decides where it ranks. There are no accounts and no passwords — everything below works without one.

What we collect

The link or handle you submit. The platform, handle and URL you rank — shown publicly on the leaderboard, which is the entire point of the site.

Display name, description and category. Whatever you type in, shown publicly on your listing. Each listing sits in exactly one of the site's 28 categories.

Follower / post numbers. Self-reported by you at submission time for social listings, shown publicly next to your listing. We never scrape them.

Profile picture. Either a URL you paste or a file you upload. Uploads are stored in our Supabase storage bucket and shown publicly on your listing.

Email address — optional. Only if you choose to enter one. We use it to notify you if someone outbids your rank, and — since you're giving it to us voluntarily as part of a paid transaction — we may occasionally also use it to tell you about relevant offers, product updates, or tools we think you'd find useful. It is never shown publicly and never sold or rented. Every promotional email includes a one-click unsubscribe; opting out of promotions never affects your outbid notifications or your listing. If you'd rather we only ever use your email for outbid alerts, say so via the contact link below.

Mobile number — required to pay. Cashfree requires a mobile number to create a payment order, so it's mandatory at checkout. It is passed straight to them to process that payment and nothing else: it is never shown publicly, never used for marketing, and our application does not store it in our database.

Payment information. We never see or store your card number, UPI ID or bank details — Cashfree handles those directly. What comes back to us is a payment reference and the amount, which we record for order and reconciliation purposes.

Clicks. When someone opens your listing's link we record a timestamp against the listing. That produces the lifetime click count shown on each card, and the 24-hour count behind “Hot in 24 hours”. It is aggregate — we record that a click happened, not who made it.

Page views and presence. We count page views for the visitor total shown on the home page, and keep a short-lived presence record so the “online now” number works.

Anonymous browser ID. On your first visit we generate a random ID and store it in your browser. It is not tied to your name, email or any account — we don't have accounts. It is what makes “online now” work, and it is reused for reactions and predictions so one browser behaves consistently without ever identifying you.

Reactions. When you react to a listing we store your anonymous browser ID against that listing and reaction — enough to stop double-counting and let you change your mind. Reaction counts are public; who reacted is not.

Predictions. Your guess, your anonymous browser ID, and an optional nickname — shown publicly on the spectator leaderboard if you give one, otherwise as an auto-generated “Prophet #XXXX”.

Push notification subscription — optional. If you tap “notify me of big moves”, your browser generates a push subscription that we store so we can send that one type of alert. It is a standalone anonymous subscription, not linked to your browser ID or email, and it is not readable through our public API. Turning notifications off in your browser removes it.

IP address. Used only in memory, in the moment, to rate-limit abuse — stopping scripts from hammering checkout, uploads or admin endpoints. It is not written to our database and never linked to your listing.

What your browser stores

The site keeps four things in your browser's local storage: your anonymous browser ID, which reactions you've given, a visit-streak counter, and — most importantly — your ownership key.

The ownership key is how we know a listing is yours. When you pay for a listing for the first time, your browser is given a secret key for it. Presenting that key is the only way to later change that listing's name, description, picture, category or numbers. There is no account to fall back on and no way for us to re-issue it.

So: if you clear your browser storage, use a different browser, or switch devices, you lose the ability to edit that listing. You can still pay to raise its bid — anyone can — but the editable details stay as they were. Please keep this in mind before clearing site data.

The application itself sets no cookies. Google Analytics, described below, sets its own.

What's public and what isn't

Public: your handle or display name, link, category, description, picture, current bid, lifetime clicks, reaction counts, your position on the board and within your category, and your activity in the “Latest moves” feed. The Legends page also shows an aggregate total of all money spent across the site — a single combined figure only. No individual payment, amount-per-person, payment reference, phone number or email is ever published.

Never public: your email, your mobile number, your ownership key, payment references and any internal payment or ownership fields. These are server-side only and are excluded from the data our public pages can read.

Third parties we use

Cashfree Payments — processes payments. We pass them your mobile number (which they require to create an order) and your email if you gave one. Their handling of payment data is governed by their own privacy policy.

Supabase — hosts our database and image storage.

Vercel — hosts and serves the site.

Resend — sends outbid notifications and any promotional emails, only ever to addresses you provided yourself.

Google Analytics — we use Google Analytics to understand how the site is used, such as which pages are visited and roughly where traffic comes from. Google Analytics may collect usage and analytics information and may use cookies or similar technologies. That collection and any further processing is governed by Google's own policies, not ours, and we can't make promises on Google's behalf about what they retain or how they use it. If you want to avoid it, browser settings, extensions and Google's own opt-out tooling all work here as they do on any other site.

Your browser's push service (Google, Mozilla, Apple or Microsoft, depending on your browser) — the standard way any website delivers push notifications.

We don't sell your data, and we don't run ad networks or advertising pixels.

How long we keep things

Listings stay. Being outbid does not remove your listing — it moves down the board and onto a later page. Listings and everything attached to them are kept until they are actually removed.

Unfinished checkouts expire after 24 hours. If you start a payment and don't complete it, that pending claim stops being usable after a day.

Ban records are kept indefinitely. A ban record stores the platform and handle only, no personal details, so the false-numbers rule described in the Rules can be enforced.

Removal is manual. There is no self-service delete. Contact us with the link or handle you submitted and we will remove the listing; deleting it also removes the click and activity history attached to it. Removing a listing does not lift a ban.

Your choices

You control what you submit — email is optional, the picture is optional, the description is optional. To have a listing or your email removed, contact us with the link or handle you used.

Clearing your browser's local storage resets your anonymous browser ID, reactions and streak — and, as warned above, your ownership key. Turning off notifications in your browser removes your push subscription immediately.

Security

Payments are verified server-side before anything changes on the board: we check that the confirmation genuinely came from Cashfree, that it's recent, and that the amount and currency match what was quoted. Private fields are restricted at the database level rather than merely hidden in the interface. Uploads are checked before they are accepted. No system is perfect and we don't claim otherwise — but that is the standard we hold this one to.

Children

This site is not directed at children under 18 and we don't knowingly collect data from them.

Changes to this policy

If this policy changes we'll update the date at the top. Continued use of the site after a change means you accept the updated policy.

Contact

Questions about your data, or a removal request? Reach out via LinkedIn.