This Privacy Policy explains how WinMe handles information when you browse the Service, submit an anonymous customer demand signal, contact support, exercise a privacy right, or purchase a leaderboard position.
Who controls the data
For information processed directly by WinMe, WinMe acts as the controller where applicable. Privacy requests may be submitted through our Data Rights form or to privacy@winme.lol.
Information we collect
For paid leaderboard positions, we may collect the business name, website, contact email, category, cumulative public bid value, transaction amounts, rank, Dodo payment/checkout identifiers, timestamps, and related reconciliation records. For support and data-rights requests, we process the information you submit in those forms.
Our servers and security providers may also process standard technical information such as IP address, browser/user-agent information, request timestamps, security signals, and error records. WinMe does not intentionally publish bidder contact email addresses, Dodo payment identifiers, or raw security data.
Anonymous demand signals
The customer-signal feature uses a private manual review queue. The sentence you submit is stored temporarily in MySQL so WinMe can review it before publication. It is not automatically approved, normalized, scored, or published. Obvious contact, account, payment, or other identifying information is blocked before the review queue where detected.
The review notification is sent only to support@winme.lol. A signal becomes public only after an authorized reviewer explicitly approves it through a single-use, time-limited review link. Rejected submissions remain non-public.
Approved records contain the submitted non-identifying criterion together with category, buying stage, review metadata, timestamps, and keyed deduplication/rate-limit hashes. Once enough approved observations exist in a category, WinMe may use approved records to create aggregate demand briefs. A public brief is not represented as a statistically representative survey, an identified buyer request, or a claim about market share.
AI processing
Manual customer-signal approval does not require OpenAI or another automated verification service. WinMe may separately use AI to help generate aggregate category briefs from already approved, non-identifying records where that feature is enabled. AI-generated aggregate briefs do not automatically approve customer submissions.
Payments
Dodo Payments processes checkout and payment credentials. WinMe receives transaction identifiers, payment status, amount, customer email and related data needed to verify and reconcile a paid position. WinMe does not store full payment-card numbers.
Cloudflare Turnstile and Compatinova
Where enabled, Cloudflare Turnstile is the primary anti-abuse control on public forms. Turnstile processes browser and security signals under Cloudflare's applicable terms. If Turnstile cannot render or complete, WinMe may offer the Compatinova compatibility fallback. That fallback uses a short-lived server-issued challenge, pseudonymous network/browser hashes, and a one-time signed token. Compatibility challenge records expire quickly and are not used as customer-demand data.
Why we process information
Where the GDPR or similar law applies, our legal bases may include: performance of a contract for paid leaderboard purchases; legitimate interests in operating, securing, ranking, measuring and improving the Service; compliance with legal obligations relating to accounting, fraud, disputes and lawful requests; and consent where we explicitly ask for it for optional technologies or marketing.
Public information
Business name, submitted website, category, cumulative public bid value, rank, and related leaderboard activity may be public by design. Leaderboard position is paid placement and is not a WinMe endorsement.
Retention
Approved customer signals are configured to be pruned from MySQL after 365 days. Short-lived Compatinova challenge records expire within minutes and are periodically pruned. Payment/reconciliation records may be retained longer where reasonably required for accounting, fraud prevention, disputes, tax, contractual enforcement, or legal obligations. Support and privacy correspondence may also remain in the configured mail system according to operational and legal needs.
International transfers and processors
WinMe may use service providers for payment processing, infrastructure, email delivery, security, and optional aggregate brief generation. These providers may process information in countries other than your own. Where required, appropriate contractual or legal transfer mechanisms should be used by the production operator.
Your rights
Depending on your location, you may have rights of access, correction, deletion, portability, restriction, objection, and withdrawal of consent where processing relies on consent. You may also have the right to complain to a competent data-protection authority. Submit a request through Data Rights. We may need to verify that you are entitled to act on the record before disclosing or changing it.
Automated processing
Customer-demand submissions are not automatically approved for publication. Publication requires manual review. Paid leaderboard rank is determined by verified cumulative bid value and deterministic ranking rules, not by AI.
Cookies and optional analytics
At launch, WinMe is configured with non-essential analytics disabled. Necessary session/security functionality and third-party payment/security components may use storage needed to operate their services. If optional analytics, advertising, or similar non-essential technologies are added, the production operator should enable an appropriate consent mechanism before using them where required.
Children and sensitive data
WinMe is a business-oriented service and is not directed to children. Do not submit health information, government identifiers, payment details, passwords, confidential business data, or other sensitive personal information in customer-demand fields.
Contact
Privacy questions can be sent through Data Rights, Support, or to privacy@winme.lol.