Privacy Policy

When you use ClaimTheWorld.lol, we collect information you provide directly:

• Account information: email address, username, and display name when you register.
• Promotion content: titles, descriptions, destination URLs, and images you submit for territory promotions.
• Payment information: we do not store card numbers. Payments are processed by Stripe and subject to their privacy policy.
• Communications: messages you send to our support team.

We also collect information automatically:

• Usage data: pages visited, territories clicked, bids placed, and interactions with the map.
• Analytics events: views and clicks on territories, stored as hashed session identifiers — not linked to personal identity.
• Device data: browser type, operating system, and referring URL.
• IP address: hashed and used only for anti-spam view counting; we do not store raw IP addresses.

• To operate the platform: process bids, transfer territory ownership, and display promotions.
• To send transactional notifications: outbid alerts, takeover notifications, and payment confirmations.
• To provide analytics to territory owners: aggregate view counts and click-through rates.
• To enforce our content policy and moderate promotions.
• To detect and prevent fraud, abuse, and unauthorized access.
• To improve the platform based on usage patterns.

We do not sell your personal information. We share data only in these circumstances:

• Publicly visible: Your username, territory ownership, current bids, and promotion content are displayed publicly on the platform.
• Payment processor: We share transaction data with Stripe to process payments.
• Email provider: We share your email address with our email provider (Resend) solely to deliver transactional notifications.
• Legal requirements: We may disclose information if required by law or to protect the rights and safety of users.

Territory views are tracked using a session-based system. We hash session identifiers before storage — we cannot identify individual visitors from analytics data.

Clicks on territory promotion links are recorded as aggregate counts. We use a redirect endpoint (/api/analytics/click) to count clicks before sending users to the destination URL.

Analytics are visible to territory owners in their dashboard. We clearly distinguish between lifetime totals and per-ownership-period data.

• Account data is retained until you delete your account.
• Bid history and ownership history are retained permanently as part of territory records.
• Analytics events are retained for 24 months.
• Payment records are retained as required by financial regulations (typically 7 years).

We use cookies and similar technologies to maintain your session (authentication), remember preferences, and prevent duplicate view counts.

We do not use third-party advertising cookies or tracking pixels from ad networks.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a machine-readable format.
• Opt out of non-essential communications.

To exercise these rights, contact us at privacy@claimtheworld.lol.

We use industry-standard security practices: HTTPS for all connections, hashed passwords, server-side validation of all inputs, and row-level security on the database. No system is 100% secure; we encourage you to use a strong, unique password.

ClaimTheWorld.lol is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at privacy@claimtheworld.lol.