Privacy Notice

Who we are

The Tiny Dashboard is the operator and data controller for this service. Privacy questions and rights requests can be sent to privacy@thetinydashboard.com. The operator’s registered legal name and postal address will be added before public launch.

Data we collect

• Submission and claim data: website URL, category, work email, company logo, verification method, and ownership evidence.
• Account and profile data: Firebase user identifier, email address, display name, sign-in provider, email-verification status, preferences, watchlists, and public profile information.
• Participation data: BP and XP ledger events, rank history, prediction or achievement activity, and rewarded-ad completion signals.
• Technical and safety data: IP address, device/browser information, timestamps, approximate region, security events, and abuse signals.
• Communications: support, moderation, legal, and privacy correspondence.

Why we use data

We process data to provide and secure the service, verify website ownership, calculate and audit rankings, prevent manipulation, respond to requests, meet legal duties, and improve the product. Depending on your location, our legal bases are performance of a contract, legitimate interests, consent, and compliance with law.

Advertising and cookies

Rewarded advertising is optional. Browsing must remain available without accepting a rewarded ad. Optional analytics or advertising storage will not be activated where consent is required until you choose it. See our Cookie Notice and Rewarded Ads Policy.

How we share data

We use Google Firebase to provide email/password and Google account authentication. We may also share the minimum necessary data with hosting, security, email, analytics, identity-verification, moderation, and advertising providers acting under contract; with professional advisers; or when required by law. We do not currently sell personal information. If future advertising constitutes “sale” or “sharing” under applicable law, we will provide the required opt-out controls before activation.

International transfers

Service providers may process data outside your country. Where required, we use adequacy decisions, contractual safeguards, or another lawful transfer mechanism. Details will be available from the privacy contact.

Retention

We retain personal data only as long as needed for the purposes above. Account data is kept while an account is active and normally deleted or anonymized within 24 months after closure; routine security logs are normally kept for up to 12 months; claim and ranking-integrity records may be kept longer where necessary to prevent fraud, resolve disputes, or meet legal obligations. Final schedules will be documented before launch.

Your rights

Depending on your location, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. California residents may also have rights to know, delete, correct, opt out of sale/sharing, limit certain sensitive-data uses, and receive non-discriminatory treatment. Türkiye residents may exercise the rights provided by Law No. 6698. Send requests to the privacy contact; we may verify identity before responding.

Children

The service is not directed to children under 13, and we do not knowingly collect their personal information. Website claiming, rewarded participation, and account features are limited to people who are at least 18 or the age of legal majority where they live.

Security and changes

We use proportionate administrative, technical, and organizational safeguards, but no online service can guarantee absolute security. We will post material notice when this policy changes and update the effective date.