Minimal data by design

What we collect

• Public profile data: your handle, optional photo and note, verified total, activity, rank, country ranking, view count, and generated share cards.
• Checkout data: the requested total, amount due, checkout and payment identifiers, payment status, and payer email provided to us by Dodo Payments. WealthFlex does not collect or store full card numbers.
• Location: a country code supplied by our edge provider when a new claim is created. We do not ask your browser for precise location.
• First-party metrics: Supabase stores hashed anonymous browser identifiers and recent timestamps to count active visitors and qualified Flex-page views. It does not store the raw metric cookie or use these counts for advertising.
• Optional analytics: if you accept analytics, Google Analytics processes page paths and standard device, referral, approximate-location, session, and interaction information for internal aggregate traffic analysis and investigation. It does not supply the user-facing counters. We do not send profile notes, payment details, or other user-provided content as analytics parameters.
• Technical and safety data: standard request information such as IP address, user agent, referrer, timestamps, and security signals may be processed to deliver the site, filter bots, prevent abuse, diagnose errors, and protect payments.
• Messages: information you provide when contacting us about support, legal notices, or privacy requests.

How we use information

We use information to create and rank profiles, confirm and reconcile payments, deliver live updates, count qualified views and active visitors, send transactional rank notifications, prevent fraud and manipulation, maintain and improve the service, resolve disputes, enforce our Rules and Terms, and comply with legal obligations.

Cookies and local storage

We use a strictly first-party anonymous metric cookie to deduplicate views and estimate recent active sessions. We also store your analytics choice locally. If you decline, the Google Analytics tag is not loaded; the first-party public counters still operate independently. If you accept, Google Analytics may set analytics cookies to distinguish visitors and sessions. Advertising storage and personalization features are disabled. You can change your choice at any time through “Analytics settings” in the footer.

What is public

WealthFlex is public by design. Profile content, verified totals, activity, ranks, country ranking, views, profile pages, and share cards may be visible to anyone and indexed by search engines. Do not submit content you do not want displayed publicly.

Service providers and disclosure

We share only what is reasonably necessary with providers that support payments (Dodo Payments), hosting and edge security (Cloudflare), database, storage, and realtime features (Supabase), optional site analytics (Google), and transactional email (Resend). We may also disclose information when required by law, to protect rights and safety, to investigate abuse, or as part of a business transfer. We do not sell personal information or use it for behavioral advertising.

Retention and security

Analytics retention is controlled in the Google Analytics property and should be set to the shortest period that meets our reporting needs. Public profiles and ranking history remain while needed to operate the board. Payment, fraud, dispute, and legal records are retained as required for those purposes. We use reasonable safeguards, but no online service can promise absolute security.

Your choices and rights

You can clear cookies and local storage through your browser. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a data-protection authority. We may need information to verify and locate your request. Removing a public profile does not reverse a completed payment and may not immediately remove limited backups or records we must retain.

Children

WealthFlex is for adults and is not directed to children under 18. We do not knowingly collect personal information from children.

Changes

We may update this policy as the service or law changes. Material changes will be shown here with a new effective date.