Privacy
What we collect, why, and what we deliberately don't.
Who's responsible
Bestclick.lol is run by @IamRealManish on X. For anything below, email contact@bestclick.lol.
The short version
There are no accounts here, so there is very little to know about you. We never store your IP address, we never see your card details, and we run no advertising trackers or third-party analytics. We do count visits to the board itself, the same privacy-preserving way we count clicks — see "Site visits" below.
What we store
Listings
A listing is public by definition: its web address, name, description and logo are shown to everyone. If you add a listing, you are publishing that information. We also keep a history of every change made to a listing's name, description or logo, so vandalism can be traced and reverted.
Payments
Checkout is handled by Dodo Payments, who are the merchant of record. Card numbers never reach our servers. What we keep is the amount, the currency, the payment and checkout identifiers Dodo gives us, and the email address you enter at checkout if you enter one. We also store the raw notifications Dodo sends us about your payment, so we can prove what happened if a payment is disputed.
Site visits
To show how many people are using the board — visitors today, and how many are here right now — we count visits to the site itself the same way we count clicks: a one-way SHA-256 hash of your IP address, your browser's user-agent string, the date, and a secret salt, so one visitor counts once per day without identifying them. "Online now" is not stored at all — it is just how many browsers currently hold an open connection to the live board, and it resets the moment you close the tab.
Clicks
When someone clicks through to a listed product we record that it happened, when, and the page they came from. To count one visitor once per day without identifying them, we store a one-way SHA-256 hash of your IP address, your browser's user-agent string, the date, and a secret salt. The date is inside the hash, so yesterday's hash cannot be matched to today's, and the same visitor cannot be followed from one listing to another using the stored value. The IP address itself is never written to the database.
Edits and reports
If you edit a listing or report one, we store the same kind of one-way hash of your IP address so we can rate-limit abuse, along with whatever text you submitted. Reports are visible only to moderators.
Cookies
We set a security cookie on pages with forms, to stop other websites submitting those forms on your behalf. Moderators get a sign-in cookie. That is all. There are no advertising, analytics or cross-site tracking cookies, which is why this site has no cookie banner.
Other companies involved
- Dodo Payments — processes payments as merchant of record and receives your email and payment details directly.
- Google Fonts — our pages load typefaces from Google's servers, which means Google receives your IP address and browser details when a page loads.
- The sites listed on the board — clicking a listing sends you to that company's website, tagged so the founder can see the visit came from us. What they do with that visit is covered by their own policy, not ours.
When you add a listing we also fetch that site's homepage once to read its
title, description and logo. We identify ourselves as
BestclickBot when we do.
How long we keep it
Listings, promotions and click records are kept for as long as the board runs: a leaderboard is a public record of what was promoted and when, and the payment history has to be retained for accounting and dispute purposes. Site visit records are kept only as long as useful for the visitors-today figure and abuse detection. Payment notifications are kept for seven years. Reports are kept once resolved so a repeat problem is recognisable.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it — write to contact@bestclick.lol. Two honest limits. First, we cannot find click or site-visit records that relate to you, because they are one-way hashes with no key back to you; that is the point of storing them that way. Second, we cannot delete a payment record that we are required to keep, though we can remove the listing it paid for.
If you are unhappy with how we have handled a request you can complain to your national data protection authority.