Security
How we protect data and keep the ranking honest.
Data minimization
No passwords and no accounts, there is nothing to steal. IP addresses are stored only as a one-way hash (for deduplication), never in the clear. Geolocation only at the country level; no personal identifiers.
Anti-inflation protection
View deduplication by device and day. Rate limits on requests and screening of automated and data-center traffic. Only “quality” views are counted; systematic inflation leads to removal of the entry.
Infrastructure
All traffic over HTTPS. Secrets are kept server-side and never reach the browser. Data lives in Neon (PostgreSQL) and Upstash (Redis), accessible only to server functions.
Responsible disclosure
Found a vulnerability or traffic inflation? Write to us, we’ll look into it quickly and thank you. Please don’t exploit a finding publicly before it is fixed.