Privacy policy

Last updated October 10, 2026

This policy explains what information RankTheWorld ("we") collects when you use ranktheworld.io, why we collect it, and the choices you have. We keep it short because we collect very little: we don't sell your data, show ads, or track you across other sites.

What we collect

Without an account: nothing that identifies you. Browsing World Data needs no sign-in. We count page views with cookie-free analytics (see below).
When you create an account: your name and email address, and either a password (stored only as a scrambled hash we can't reverse), a passkey (we store only its public key; the private part never leaves your device), or your Google account's name and email if you sign in with Google (we don't keep your Google picture or access to your Google account).
While you're signed in: a session record with the device's IP address and browser type, so you stay signed in and we can spot suspicious sign-ins.
What you create: your travel quiz answers, rankings and favorite places.
Leaderboard votes: which choice you voted for on each list. Signed in, it's kept with your account. Signed out, it's kept with a random code in a cookie on your browser (rtw_voter) and a scrambled, one-way code made from your IP address, which only limits how many votes one network can add to a list; we don't store the address itself. Everyone sees only the totals, never who voted for what.
Server logs: like any website, our servers briefly record requests (including IP addresses) to keep the service running and to stop abuse.

How we use it

To run your account: sign you in, save your rankings and show them back to you.
To send emails you need: confirming your address and resetting your password. We don't send marketing email.
To keep the site secure: rate limits, blocking abuse and checking new passwords against known data breaches.
To understand which pages are useful, using totals that don't identify anyone.

Who helps us run the site

We share only what each service needs to do its job:

Google Cloud runs our servers, and a managed database provider stores account data.
Resend delivers our account emails.
Google, only if you choose "Sign in with Google".
Have I Been Pwned checks new passwords against known breaches. It receives only the first few characters of a scrambled version of the password, never the password itself.
Cloudflare provides our analytics and may protect and speed up the site. Its Web Analytics doesn't use cookies or collect personal data.
flagsapi.com serves country flag images, which your browser loads directly, so that service sees your IP address like any website you visit.

Some of these providers are in the United States. We don't sell or rent personal information to anyone.

Cookies

We use one cookie to keep you signed in, plus short-lived ones during sign-in. We don't use advertising or tracking cookies. Details are in our cookie notice.

How long we keep it

Your account and what you've created: until you ask us to delete your account.
Sign-in sessions: up to 30 days after you last use them.
Email confirmation and password reset links: 24 hours and 1 hour.
Server logs: up to 30 days.

Your choices and rights

You can delete your account and everything in it yourself: choose Delete account in the account menu and confirm with the link we email you. You can also ask us to show you the information we hold about you, correct it, send you a copy, or delete it for you. Email support@ranktheworld.io from the address on your account and we'll reply within 30 days. Depending on where you live (for example the EU, UK or California), you may also have the right to object to how we use your information or to complain to your data protection authority.

Children

RankTheWorld isn't meant for children under 13, and we don't knowingly create accounts for them. If you believe a child has made an account, email us and we'll delete it.

Changes

If we change this policy, we'll update the date at the top. For important changes, we'll also tell account holders by email before they take effect.

Contact

Questions about privacy: support@ranktheworld.io.