songtop.lol is designed to be used anonymously — most visitors and submitters never give us any personal information directly. This page explains what we do process, who we share it with, and your rights.
You don't need an account, email address, or any personal information to browse the leaderboard or listen to the #1 track.
When you pay, checkout is handled entirely by Stripe — we never receive or store your card details. Against each payment, we record which version of these policies you accepted and when, and a one-way cryptographic hash of the IP address the payment request came from (not the address itself), kept solely as fraud and chargeback-dispute evidence.
Stripe, our payment processor, collects your email address and payment details directly on their own hosted checkout page as part of processing your payment. This is governed by Stripe's own privacy policy, not ours. We only receive a payment confirmation and reference ID from Stripe — not your card number, and not your email unless Stripe passes it to us as part of that confirmation.
We use the following providers, each processing data on our behalf to run the site:
We don't set any first-party cookies, and we don't use analytics, tracking pixels, or advertising technology of any kind. If you complete a payment, Stripe's own checkout page (on stripe.com, not our domain) sets cookies necessary for fraud prevention during that transaction — this is outside our control and governed by Stripe's own practices.
Leaderboard data (track titles, artists, bid amounts, timestamps) is kept indefinitely, since it's the historical record of the board itself. Consent records and hashed IP addresses tied to payments are kept only as long as needed to resolve payment disputes, and no longer than 24 months after the transaction.
If you're in the European Economic Area, United Kingdom, or a jurisdiction with similar law, you have the right to request access to, correction of, or deletion of any personal data we hold about you.
Because songtop.lol doesn't use accounts, the practical way to exercise this is to email hello@songtop.lol with whatever payment reference or email address is relevant, and we'll respond within the time required by applicable law.
Our service providers may process data outside your country of residence, including in the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses maintained by our sub-processors.
songtop.lol isn't directed at children, and we don't knowingly collect personal data from anyone under 16 (or the minimum age required in your jurisdiction).
We may update this policy from time to time; the date above reflects the version currently in effect.