Privacy Policy

This policy explains how RightRanked processes personal data when you use our website. It is written to meet the transparency requirements of the Swiss Federal Act on Data Protection (nFADP / revDSG). Use of the service is also governed by our Terms of Use.

Last updated: 26 June 2026

Who Is Responsible

The data controller is Ivan Laube, operating RightRanked, Vorhaldenstrasse 10, 8049 Zürich, Switzerland. For privacy questions and requests: rightranked@gmail.com.

Scope

This policy applies to visitors of the RightRanked website. We do not operate user accounts for the public. Admin access, if used internally, is outside the scope of this public notice.

What We Collect

We collect only data needed to run the service, understand aggregate usage, prevent abuse, and respond to messages you send us. Depending on how you use the site, this may include:

• Technical and usage data: browser type, device information, pages viewed, approximate referrer, and timestamps. Cloudflare Web Analytics may process privacy-oriented visit metrics when enabled.
• First-party analytics: when you play an embedded video, we may record the video identifier, niche category, a random session identifier stored in your browser, and the page referrer. If no referrer is available, our server may store a connection identifier derived from your network address for deduplication only.
• Cookies and local storage: a preference cookie that remembers your default niche category (up to one year), and local storage keys used for analytics session identification and play deduplication.
• Contact form data: if you contact us, we process the name, email address, topic, and message you submit.
• Security and abuse prevention: connection identifiers (such as network address or browser signature) used for rate limiting, and challenge tokens when Cloudflare Turnstile is shown on repeated contact submissions.
• Error diagnostics: technical error reports sent to our monitoring provider when something fails, which may include request metadata and stack traces with secrets redacted where possible.
• Third-party embeds: embedded YouTube players are provided by Google. When you interact with a player, Google may collect data under its own policies.

We do not ask you to create a public profile and we do not knowingly sell personal data.

Purposes and Legal Bases

We process personal data to:

• deliver and secure the website (hosting, content delivery, error monitoring);
• remember your default niche preference;
• measure aggregate product usage and video engagement;
• prevent spam and abuse of forms and APIs;
• reply to messages you send through the contact form.

Under Swiss law, we rely primarily on overriding legitimate interests for operations, security, and aggregated analytics that are proportionate and privacy friendly. For contact messages, processing is based on your request and our legitimate interest in responding. Where consent is required for a specific tool (for example, certain third-party embeds), you can limit interaction with those features or adjust your browser settings.

Recipients and Processors

We use trusted service providers who process data on our instructions, including:

• Vercel (website hosting and delivery);
• Neon (database hosting for operational and analytics data);
• Cloudflare (analytics beacon and, when triggered, bot protection on contact);
• Resend (delivery of contact form email);
• Sentry (error and performance monitoring);
• Google / YouTube (video embeds).

These providers may access personal data only as needed to perform their services. Their own privacy policies govern any additional processing they perform as independent controllers (notably for YouTube).

International Transfers

Some providers are located outside Switzerland, including in the United States. Where required, transfers are protected by appropriate safeguards such as the provider's contractual commitments, participation in recognized transfer frameworks, or standard contractual clauses. You may contact us for more information about safeguards for a specific provider.

Retention

• First-party analytics events and rate-limit records are deleted on a rolling basis, typically within 7 days.
• The default-niche preference cookie is stored for up to one year, until you clear cookies or use "Change default" in the site footer.
• Analytics session identifiers in local storage persist until you clear site data in your browser.
• Contact messages are kept only as long as needed to handle your request and maintain a reasonable correspondence record, then deleted or anonymized unless law requires longer retention.
• Error monitoring data is retained according to our monitoring provider's configured retention window.

Your Rights

Under the nFADP, you may have the right to:

• request information about whether we process your personal data;
• request access to personal data we hold about you;
• request correction of inaccurate data;
• request deletion where applicable;
• object to certain processing based on legitimate interests;
• request data portability where technically feasible and legally required.

To exercise these rights, email rightranked@gmail.com. We may need to verify your request. We will respond within the timelines required by Swiss law.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB): www.edoeb.admin.ch.

Cookies and Browser Controls

You can block or delete cookies and local storage in your browser settings. Clearing site data removes your default niche preference and analytics session identifier. Blocking cookies may limit preference memory but core browsing should still work. Limiting third-party embeds may prevent in-page video playback.

Automated Processing

RightRanked ranks publicly available videos using engagement signals. This ranking does not produce legal or similarly significant effects concerning you as an individual, and we do not perform profiling that targets you for individualized decisions.

Security

We apply reasonable technical and organizational measures to protect personal data, including encrypted transport (HTTPS), access controls on infrastructure, rate limiting, and redaction of sensitive values in error reports where feasible.

Children

The service is intended for a general audience and is not directed at children under 16. If you believe a child has provided personal data through the contact form, contact us and we will delete it.

Changes to This Policy

We may update this policy to reflect product, legal, or operational changes. We will post the revised version on this page and update the "Last updated" date. For material changes, we will provide a clear notice on the website where appropriate.

Contact

Privacy requests and questions: rightranked@gmail.com. General feedback: contact form.