Privacy policy

This interim privacy page describes data NATION RANK currently uses. It is not a substitute for counsel-reviewed terms.

If you create an optional account, we store authentication details including your email, plus your username, avatar, and profile settings (such as default public or anonymous support). Signed-in sessions use first-party auth cookies (names typically follow sb-<project-ref>-auth-token, including possible chunked or PKCE variants). Guest rankings and guest support do not require those cookies.

When you buy Support Points we store a payment record: country, amount and points, public or anonymous visibility, and payment status. Card details are handled by Stripe-hosted Checkout. After you continue to payment, Stripe may set cookies on Stripe's domain. NATION RANK does not store full card numbers and does not load Stripe.js on this site.

Application data is stored with Supabase. Public avatars may load from Supabase Storage in the browser. The site is hosted on Vercel. First-party page and API requests (including live updates and checkout) go to this site on Vercel, which may retain technical logs and may optimize images. Country flags are served through that image optimization; the optimizer may fetch flagcdn.com. Account email such as confirmation and password-reset messages is sent with Resend. Cloudflare Turnstile may run on sign-in, sign-up, and forgot-password pages in production when it is configured. It is not loaded on other public pages.

If you open a valid invite URL, we may set a first-party cookie named nr_referral (HttpOnly, SameSite=Lax, 30-day maximum age) so a qualifying signup can be attributed for Bonus Points. It is not required for rankings or guest checkout.

This app does not use first-party localStorage or sessionStorage. It does not include Google Analytics, a Meta Pixel, the Vercel Analytics package, or advertising cookies.

Cookie details: Cookies. Questions: support@nationrank.world. See also Terms and Contact.