Privacy Policy

bestapp.co ("bestapp.co", "we", "us", or "our") is a pay-to-rank leaderboard operated by Herofly. This Privacy Policy explains what information we collect when you use the site, how we use it, who we share it with, and the choices you have. By using bestapp.co you agree to the practices described here. If you do not agree, please do not use the site.

We collect information in three ways: what you give us directly, what is generated by your use of the service, and what our service providers collect on our behalf.

• Email address (required to submit or raise a bid — used for payment receipts and service notices)
• Name or brand name (optional — shown publicly in the activity feed and bid history if provided)
• Project details you submit: project name, URL, optional @handle, description, category, and bid amount

• Click counts on listed projects (aggregate numbers only, not tied to the identity of the visitor clicking)
• Bid history and timestamps, which are displayed publicly on the leaderboard and activity feed
• Standard technical data such as browser type, device type, and referring page, collected via cookieless analytics (see Section 5)

All payments are processed by Polar.sh, our third-party payment processor and merchant of record. We do not collect, see, process, or store your card number, CVC, or full billing details on our own servers. Polar.sh provides us with limited transaction metadata (such as the amount paid, the email address used at checkout, and a payment confirmation status) so that we can update the leaderboard.

• To create and update your listing's position on the public leaderboard
• To process payments and send you a receipt or payment-related notice
• To display bid history and an activity feed of recent bids across the site
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To measure aggregate site usage (e.g. how many people visit, which categories are popular) via cookieless analytics
• To respond to support requests you send us

We do not use your email address for marketing unless you separately opt in, and we do not sell your personal information to third parties.

Because bestapp.co is a public leaderboard, some information you submit is shown to every visitor of the site by design: project name, URL, @handle, description, category, current bid amount, bid history (amount and timestamp), click count, and — if you choose to provide it — your name or brand name.

Your email address is never displayed publicly. It is used only for receipts, transactional notices, and — where legally required — fraud and payment-dispute handling.

We use Datafast, a cookieless analytics provider, to understand aggregate traffic to bestapp.co (for example, total visits and referral sources). Datafast does not use tracking cookies and does not build a profile tied to your individual identity across sites. We do not use advertising cookies or cross-site ad-retargeting pixels.

We share the minimum information necessary with the following service providers so that bestapp.co can function:

• Polar.sh — payment processing and checkout (receives your email and payment details directly; see Polar's own privacy policy at polar.sh)
• Datafast — cookieless, aggregate website analytics
• Our hosting and database providers — store the leaderboard data described in Section 2

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We retain listing, bid, and activity data for as long as your project remains part of the public leaderboard, and for a reasonable period afterward for accounting, fraud-prevention, and legal compliance purposes. You may request deletion of your personal information (see Section 8), though public bid-history records that are material to the integrity of the leaderboard (e.g. amounts and timestamps) may be retained in de-identified form.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, or to object to or restrict certain processing. To exercise any of these rights, contact us at the email address in Section 12. We will respond within a reasonable time and in accordance with applicable law (such as the GDPR for users in the EU/UK, or the CCPA for California residents).

We use reasonable technical and organizational measures to protect the information we hold, including encrypted connections (HTTPS) and access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

bestapp.co is not directed at children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Our service providers may process and store information in countries other than your own, including the United States. Where required by law, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

We may update this Privacy Policy from time to time; the "Last updated" date at the top of this page reflects the most recent revision. If the changes are material, we will make reasonable efforts to make that clear on the site. For any privacy questions, requests, or complaints, contact us at privacy@bestapp.co.