Home · Privacy

Privacy Policy

Effective August 24, 2026. Last updated August 24, 2026.

This Privacy Policy explains how usurper.lol (https://usurper.lol) collects, uses, and shares information when you visit the site, click a listing, or pay for a ranking. It sits alongside our Terms of Service.

Who is responsible

The Service is operated by the team behind usurper.lol, based in India (“we”, “us”, “our”). For any privacy question, data request, or grievance, you can reach our Grievance Officer at the email below.

• Email: hi@whilecoffeebrews.com

What we collect

We keep the Service small. We collect only what we need to run the board, take payment, stop abuse, and understand traffic.

• Analytics identifier. Our analytics provider, DataFast, may store a datafast_visitor_id value to count visits and attribute conversions. We use it to understand traffic and connect a checkout to a visit. It is not your name.
• Checkout and listing data. The URL or X handle you submit, the category, the bid amount, and the public name, description, and image we resolve for that destination. Payment confirmation identifiers from Dodo Payments (order and checkout IDs) are stored so we can place the ranking.
• Payment data. Card details and billing identity are collected by Dodo Payments, our Merchant of Record, not by us. Dodo Payments may send us confirmation that you paid and a net amount. See Dodo Payments’ own privacy notice.
• Clicks. When you visit a listing from the board, we may record the listing, a time, the referrer, user agent, an approximate country, and a hashed (SHA-256) IP address. The hash is for rate limiting and fake-click reduction, not to profile you.
• Technical data. Standard request data such as user agent, referrer, and IP address may be processed by our host (Cloudflare) and by DataFast to operate and secure the Service.
• Messages you send us. If you email a notice, a category correction, or a privacy request, we keep that correspondence as needed to respond and to keep a legal record.

Cookies

We do not use cookies for advertising. Our bot-protection provider (Cloudflare Turnstile) may set a strictly necessary cookie so checkout and abuse protection can work. Analytics on usurper.lol is loaded with DataFast, which may store an analytics identifier as described above.

Why we use this data

• To perform our contract with you. To take payment, create or raise a listing, show rank, and provide the Service you asked for.
• For our legitimate and legally permitted uses. To keep the board fair (rate limits, bot filtering), display public listing metadata, measure visits, debug outages, and defend legal claims.
• To meet legal obligations. To keep tax, accounting, and complaint records where the law requires it.

Public listings

Rank, spend, names, images, descriptions, and destination links on the board are public. Anyone can see them, including search engines. Do not list a destination if you do not want that information shown. We fetch public metadata from the site or X profile you submit so visitors can recognize the listing. That fetch may disclose to the destination that usurper.lol requested the page.

Who we share data with

• Dodo Payments — checkout and payment confirmation.
• DataFast — visit and live-visitor counts.
• Cloudflare — hosting, database (D1), edge infrastructure, and Turnstile bot protection so the site can run and stay secure.
• Identity lookup helpers (for example favicon, Open Graph, and X profile and avatar services) so we can show a name and picture before and after checkout.
• Professional advisers, authorities, or a buyer of the Service if we must share data to comply with law, enforce the Terms, or transfer the project.

We do not sell your personal data. Some processors may be located outside India. Where we rely on them, we use appropriate safeguards for cross-border processing consistent with applicable law.

How long we keep it

• Analytics identifiers last as set by DataFast, or until you clear them.
• Public ranking entries stay while the listing is on the board and may remain in backups or activity history after a takedown for a limited time.
• Payment identifiers and amounts are kept as long as needed for accounting, tax, fraud, and dispute handling.
• Click records and IP hashes are kept only as long as useful for rate limiting, abuse prevention, and aggregate counts.

Your rights

If the Digital Personal Data Protection Act, 2023 (India) or a similar law applies to you, you may ask us to access, correct, complete, update, or erase personal data we hold about you, and to withdraw consent where processing was based on consent. You may also nominate another person to exercise your rights, and you may raise a grievance with us or a complaint with the Data Protection Board of India.

Email hi@whilecoffeebrews.com. We may need enough information to find your data. Public listing content that is also on your own website or X profile is not made private just by appearing on the board; you can ask us to remove the listing.

Children

The Service is for adults. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data we can identify.

Changes

We may update this policy when the Service or the law changes. The date at the top of this page is the current version. If a change is material, we will post the updated policy here.

Questions? Email hi@whilecoffeebrews.com.