Politique de confidentialité

We keep as little as the service needs. Concretely:

• Your account: an email address (unless you sign in only with X, which gives none), a display name, and, if you add them, a username, a short bio, links to your profiles elsewhere, and an avatar.
• How you sign in: a salted hash of your password if you set one, and for each provider you connected, the identifier that provider uses for you. We never see or store provider passwords.
• What you make: templates, the pictures in them, lists, descriptions and notes, and when each was created and changed.
• API keys and their use: a hash of each key (the key itself is shown once and not stored), its name and permissions, and per day and operation, how many requests it made and how much data went out.
• Sessions: a hash of each sign-in session and when it was last used.
• Reports you file about content, with the reason and any note you add.
• Votes in polls: how you arranged the items, tied to your account or, without one, to the guest cookie below.

When you sign in through another service, that service tells us the following, and nothing else:

• Google: your Google account identifier, name, email address, whether Google has verified that address, and profile picture.
• X: your X account identifier, name, username and profile picture. X does not give us your email address.
• Your profile picture from the provider is copied into the service so it can be shown as your avatar; you can change or remove it on the account page.

Four cookies, all set by us, none for advertising or analytics. There is no third-party tracking on the site.

• __Host-session — keeps you signed in. Lasts 30 days from your last visit.
• __Host-session-cache — a short-lived, signed copy of who you are, so that ordinary page views do not query the database. Lasts 5 minutes.
• theme — remembers light or dark. Lasts a year.
• __Host-guest — set only when you vote in a poll without signing in, so that you count once and can change your vote. A random token, lasting a year; we store only its hash.

The service runs on Cloudflare’s network. These are the only other parties that see any of your data, and what each one processes:

• Cloudflare (hosting, database, file storage, image resizing, and sending email): everything above, and the usual connection logs — your IP address, browser and the pages requested — which Cloudflare keeps for a short period for security and operations. We do not build profiles from these logs.
• DeepSeek (machine translation): the names, descriptions and item labels of public templates are sent for translation into the languages the site is shown in. No account data goes with them. Do not put personal information in a template’s text if you do not want it translated.
• Bing and Yandex (IndexNow): the addresses of public pages that have become indexable, so search engines find them sooner. Addresses only, no content.
• Your email provider: when we send you a verification or password-reset code, it goes through Cloudflare’s email service to your address.

Your display name, username, bio, links and avatar are shown on your public templates and lists. Public templates, published lists, their consensus view, and the pictures in them are visible to anyone, including search engines, and are available through the API. Private templates and unpublished lists are visible only to you and are excluded from every statistic. Your email address is never shown.

Data is kept while you have an account and for as long as the service needs it after that:

• A sign-up that is never verified is deleted after 7 days.
• Sign-in sessions end after 30 days without use, and at once when you sign out, change your password, or are suspended.
• One-time codes (email verification and password reset) expire in 15 minutes and are deleted when used.
• Pictures are removed about 7 days after nothing on the site refers to them any more.
• A vote cast in a poll without an account is deleted 30 days after the poll closes; the poll’s totals keep the count without the vote.
• API usage counts are kept as aggregate numbers per day and are not tied to a request.
• Deleting your account removes your profile, your sign-in methods, your sessions and API keys, your lists, your image library and your private templates, immediately. A public template that other people have ranked or forked stays, without an owner, so that their lists keep working; its author line then shows no name.

You can see and change your name, username, bio, links, avatar and email on the account page, and delete your account there. Everything you have made is readable through the API, which is how to export it. If the law where you live gives you further rights — access, correction, erasure, portability, objection, or a complaint to a supervisory authority — you have them, and you can exercise them by writing to us.

We process your data because it is needed to provide the service you asked for. Where the law requires a further basis, it is our legitimate interest in running the service safely, and, for anything optional such as your bio or links, your choice to add it.

The service is not for children under 13, or under the age at which your country lets someone agree to a service like this without a parent. If you believe a child has an account, tell us and we will remove it.

When the service starts collecting something new or sharing data with someone new, this page changes first and the effective date moves. Changes that matter are also announced to signed-in users on the site.

Questions about privacy, and any request about your data, go to contact@mytierlist.net.