Privacy Policy

Last updated: April 2026

1. Introduction

rankd is a service operated by voiddo ("we", "us"). This policy explains what data we collect, how we use it, and the rights you have over it. By using rankd you agree to this policy.

2. Information We Collect

Account data: email address, hashed password, account creation date, language preference.
Verdict data: the titles and content types you ask us to judge (movies, books, games, music, art, etc.), the tone you select (savage, honest, hype), and the resulting score and verdict text.
Billing data: handled by Paddle. We receive a subscription status, plan name, and last-four card digits — never your full payment details.
Usage telemetry: daily verdict counts, IP address (for rate-limiting and abuse prevention), browser user-agent, and timestamps.
Cookies: session cookies for authentication, plus a single anonymous device ID for the free tier (so you don't have to register to try the product).

3. How We Use Your Data

To deliver the verdict you requested and store it in your history.
To enforce daily and monthly usage limits per your plan.
To detect and block abuse (referral self-attacks, signup floods, automated scraping).
To process subscription payments and refunds via Paddle.
To send transactional emails (verdict-ready notifications, password resets, billing receipts).
To improve our AI prompts by reviewing aggregate, anonymised verdict patterns. We do not train external AI models on your data.

4. What We Don't Do

We do not sell, rent, or trade your data with third parties.
We do not run advertising networks or third-party trackers on rankd.voiddo.com.
We do not read or index your verdict history for marketing or profiling.
We do not retain verdict requests longer than your account exists.

5. Service Providers

rankd AI v1.2 — our proprietary verdict engine — runs on top of enterprise inference infrastructure provided by sub-processors listed below. The engine, the prompts, the scoring layer, and the post-processing pipeline are all our own work; the sub-processor performs the underlying language-model inference under contractual data-protection terms. To run rankd we share specific data with the following processors:

Google LLC: AI inference infrastructure (data processor). Receives verdict prompts and the title you submitted to perform the underlying inference step. Google's API terms forbid using API content to train their models.
Paddle.com Market Limited: our merchant of record. Handles checkout, taxes, VAT, refunds, and chargebacks. Receives email and billing details directly from you at checkout.
vøiddo mailer: transactional email delivery through our owned SMTP stack. Receives recipient address and the email body.
Hetzner / our VPS provider: hosting. Server logs may contain IP addresses, retained 14 days for security and debugging.
Sentry: error tracking. May capture user ID and error stack trace, no verdict text.

6. Data Retention

Verdict history is retained for the lifetime of your account.
Billing records retained for 7 years (legal requirement, tax compliance).
Server logs retained for 14 days, then purged.
If you delete your account, all verdicts, telemetry, and personal data are permanently removed within 30 days, except billing records.

7. Security

Passwords are hashed with bcrypt (cost factor 12). All traffic is HTTPS only. Database backups are encrypted at rest. We follow standard practice for handling secrets and run a continuous internal audit of authentication and abuse-prevention layers.

8. Your Rights

Under GDPR, CCPA, and similar laws you have the right to:

Access the personal data we hold about you.
Request correction or deletion of your data.
Export your verdict history in a machine-readable format.
Withdraw consent (by deleting your account).
Lodge a complaint with your local data-protection authority.

Email support@voiddo.com to exercise any of these rights. We respond within 30 days.

9. Cookies

We use the minimum number of cookies needed to run the service: a session cookie (httpOnly) for login, an anonymous device ID for free-tier rate-limiting, and a CSRF token. We do not use third-party tracking cookies on rankd.voiddo.com.

10. Browser Extensions

The rankd browser extension reads only the URL and meta tags of the 15 supported sites (IMDB, Letterboxd, Spotify, Goodreads, Steam, etc.) — just enough to detect which item you're looking at. No keystrokes, no browsing history, no cookies, no request bodies. Nothing is sent to our servers until you click "judge it".

11. Children's Privacy

rankd is not intended for users under 13. We do not knowingly collect data from children. If you believe we have, contact us and we will delete the account.

12. Changes

We may update this policy. Material changes will be communicated via email and a banner on the homepage at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact

voiddo (operator of rankd)
Email: support@voiddo.com