Privacy Policy

Ultimate Tier List (“we,” “us,” or “the Service”) is operated from Ukraine. This Privacy Policy describes how we collect, use, and share information about you when you use ultimatetierlist.com. We are committed to handling your data transparently and to collecting only what we need to run the platform. For data-protection purposes, the data controller is the operator of Ultimate Tier List, reachable at myultimatetierlist@gmail.com.

1. Information We Collect

• Account Data: If you register with an email and password, we store your chosen username, your email address, and a securely hashed version of your password — we never store your password in plain text. If you sign in through a third-party provider such as Google, we receive your email address, basic profile information, and, where available, your profile picture from that provider.
• Profile Data: An optional avatar image and any social links you choose to add to your profile.
• User-Generated Content: The tier lists, templates, titles, descriptions, tags, and images you create or upload. If you submit a creator ranking, we also store the creator’s name, the proof-video URL you provide, and any timestamp you add.
• Engagement Data: The content you like, used to power counts and rankings on the Service.
• Reports: If you report content or an account, we collect the reason you select and any description you write.
• Usage & Technical Data: Standard server logs — such as IP address, browser type, and device or operating-system information — that are necessary for routing, securing, and optimizing the Service.
• Cookies & Local Storage: We use cookies strictly to keep you signed in (session and authentication), and local browser storage to save your active tier list so you don’t lose progress on refresh. We do not use advertising or cross-site tracking cookies.

2. How We Use Your Information

We use your data to:

• Provide, maintain, and improve the Service.
• Authenticate your identity when you sign in.
• Display your username and avatar publicly alongside the tier lists, templates, and submissions you choose to share or publish.
• Operate engagement features such as likes and counts.
• Review submissions, enforce our Terms, and keep the Service safe through moderation.
• Communicate with you about your account, security, and important changes.

Advertising & analytics: We do not currently serve third-party ads, and we do not use third-party advertising or analytics trackers that follow you across other websites. We do not sell your personal information. If we introduce advertising or analytics in the future, we will update this policy and, where the law requires it, ask for your consent first.

3. Legal Bases for Processing

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

• Performance of a contract: to create and operate your account, save your lists, and provide the features you ask for.
• Our legitimate interests: to keep the Service secure, prevent abuse, moderate content, understand and improve how the Service is used, and establish or defend legal claims — balanced against your rights and freedoms.
• Your consent: where we ask for it, such as any future optional analytics or marketing. You can withdraw your consent at any time.
• Compliance with a legal obligation: to respond to lawful requests and meet our legal duties.

We do not use your data for automated decision-making that produces legal or similarly significant effects about you.

4. Third-Party Service Providers

We rely on trusted infrastructure providers to operate the Service. These providers act as data processors on our behalf:

• Supabase: Database hosting, file storage, and user authentication.
• Vercel: Website hosting, global content delivery, and server logs.
• Google: Authentication, when you choose to sign in with Google.
• Content providers (TMDB, IGDB, Tenrai/MyAnimeList, Google Books): When you search for items to add to a list, your search terms are sent to these services to return results. Some artwork is cached and served from our own infrastructure, but in other cases — such as live search results and the interactive board — your browser loads images directly from the provider, which may receive your IP address as part of that request. We do not share your account identity with these providers.

5. International Data Transfers

We are based in Ukraine, and our service providers may store and process data in other countries, including the United States and the European Union. Where we transfer personal data across borders, we rely on appropriate safeguards and on our providers’ data-protection commitments. By using the Service, you understand that your information may be processed outside your country of residence.

6. Legal Disclosures & Business Transfers

Law enforcement: We may disclose your information where we are legally required to do so in order to comply with applicable law, a governmental request, a judicial proceeding, a court order, or legal process.

Business transfers: If the Service is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a different privacy policy.

7. Data Retention

We retain your account data for as long as your account remains active. If you delete your account, we remove your personal account data and private lists within 30 days, except where we must keep certain information for legal, security, or moderation reasons. Content you published publicly, and content that has been reported or removed for a Terms violation, may be retained in our systems — including in moderation records — after deletion, so that we can enforce our Terms and comply with the law.

Submissions that are not your personal property — such as creator rankings and creator profiles you added — are kept after you delete your account but are disassociated from your identity, and templates you published are hidden while preserved so that other users’ rankings of them continue to work.

8. Your Rights & Choices

Depending on where you live (including the EU/EEA, the United Kingdom, and California), you may have the right to access the data we hold about you, correct inaccurate data, delete your data, export or port your data, object to or restrict certain processing, and withdraw consent. EU/EEA users also have the right to lodge a complaint with their local data-protection authority. California users have the right to know about, delete, and opt out of the “sale” or “sharing” of personal information — and, as noted above, we do not sell or share your personal information.

You can exercise several of these rights directly:

• Access & correction: Edit your public profile, including your avatar, from your profile page, and reset your password using the password-reset option on the sign-in screen.
• Deletion: Permanently delete your account and its data yourself at any time from your profile’s Account Settings (Edit Profile → Delete account). You can also email us at myultimatetierlist@gmail.com if you prefer.
• Cookies: Disable non-essential cookies through your browser settings. Note that session cookies are required to stay signed in.

9. Security

We protect your data using industry-standard measures, including hashed passwords, encrypted connections (HTTPS), and access controls on our databases. No method of transmission over the internet is 100% secure, so while we strive to protect your information, we cannot guarantee absolute security. You should only access the Service within a secure environment.

10. Children’s Privacy

The Service is intended only for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18 years of age, and we do not market to them. By using the Service, you represent that you are at least 18, or that you are the parent or legal guardian of a minor and consent to that minor’s use under your supervision. If we learn that we have collected personal information from a person under 18, we will deactivate the account and take reasonable steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at myultimatetierlist@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last Updated” date above and, where appropriate, notify you through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, reach out at myultimatetierlist@gmail.com.