Your privacy.
Updated October 19, 2026. DropRank is an independent project using the Sadyr name. For privacy and support requests, email support@droprank.net. For general questions, use contact@droprank.net.
Browsing and younger visitors
DropRank has a mixed audience, including children under 13. Public maps and guides can be explored without an account. Accounts, saved lists and contribution forms are available from age 16. Before these features open, a neutral check asks for your birth month and year. These values are processed only to choose a browsing mode. They are not stored in the application database, logged by application code or forwarded to an account or advertising provider.
We keep only a signed browsing-or-eligible choice in an essential cookie for up to 30 days. It contains no unique visitor identifier. With no birth day collected, the younger age applies through the birthday month. The earlier age-check cookie is no longer accepted.
Younger visitors receive browsing-only access. Account providers and contribution forms stay closed, and the server rejects submissions. DropRank does not currently offer parental-consent registration. Parents can request access, correction, removal or an end to further collection concerning an existing child account or submission. The request process is available without a DropRank account.
Information we use
Clerk handles login emails, passwords, email verification and connected sign-in providers. DropRank does not store passwords. Account setup begins with an email invitation, which expires after one day. After you request a link, your email is sent to Clerk for that purpose. We do not place your birth month or year in the invitation.
A hash of your Clerk account identifier connects your saves and contributions across devices. For browser-only saves, an HTTP-only cookie contains a random identifier, and the database stores its hash. That cookie lasts up to one year. These identifiers still link records together; hashing does not make the records anonymous. A last-use timestamp is updated at most daily when saved-data features are used, solely to apply inactivity cleanup.
Approved reviews show the submitted display name, text and scores publicly. XP status uses aggregate reports. Collections, wishlists, saved maps, play history, pending submissions, private reports, contact messages and moderation notes are available to the linked user and site administration. Avoid including personal information in public reviews.
Service providers and support
Clerk provides authentication. Cloudflare and OpenAI Sites provide hosting and database services, with connection and security data processed by those services. Cloudflare routes DropRank email to the owner's Gmail inbox. Public map and shop feeds provide reference data; your private wishlist is matched in your browser rather than sent as a personal list to a feed provider.
Support may need account details or a submission reference to locate records and verify a request. Do not send passwords, sign-in codes or identity documents in your first message. See our request guide. Provider operational logs, backups and inbox correspondence have separate handling; ask support about those copies when making a full deletion request.
Measurement and advertising
Optional traffic, action and campaign measurement is disabled. Earlier totals were grouped by date, map, referring hostname and bounded campaign label rather than account identifier or raw IP address. Application spam limits use salted, hourly IP hashes with a short expiry. Hosting services may maintain separate security logs.
Advertising remains off. An ad-pause preference, if set, stays in this browser's local storage until changed or cleared. Essential account and saved-record cookies are separate.
Advertising is currently inactive. When advertising is enabled, Google and its partners may use cookies, web beacons, IP addresses, device identifiers, and browsing or interaction data to deliver and measure ads. The current implementation marks every future manual ad request for child treatment, which disables personalized advertising. Ads remain off while the audience and vendor review is open.
Use Privacy choices to pause ads on this browser or reopen Google’s privacy message when it is available. Google’s message provides applicable regional consent and opt-out controls. You can change your choice later. Browser ad pauses are separate from Google’s consent record. DropRank also pauses ads when your browser sends Global Privacy Control.
Learn how Google uses information from partner sites and manage your Google ad preferences.
How long records are kept
The application cleanup schedule checks the following limits hourly when its maintenance service is active. Expired records are removed on the next successful run. Failed runs retry, and the owner can inspect the maintenance status. Public map statistics and editorial source records are separate from personal submissions.
| Record | Retention | Purpose |
|---|---|---|
| XP reports | 72 hours | Keep the current XP status based on recent reports. |
| Pending or declined reviews | 90 days after submission | Allow moderation and follow-up without retaining an unfinished review indefinitely. |
| Published reviews | 1 year after submission | Keep the review useful while avoiding an indefinite public profile. |
| Contact form messages | 90 days after submission | Give the owner time to respond and resolve the request. |
| Corrections and private content reports | 180 days after submission | Support review, correction and appeals. |
| Creator verification evidence | 1 year after verification | Recheck the basis of a creator badge. |
| Saved maps, collections and play history | Until you remove them, or after 1 year without using saved-data features | Keep your personal lists available while you use them. |
| Completed deletion receipts | 30 days | Prevent retries or old sessions from restoring removed records; receipts contain only a hashed identifier and timestamps. |
| Rate-limit identifiers | Up to 2 hours | Limit spam and protect the service. |
| Earlier aggregate traffic totals | 90 days | Provide a short historical comparison. New optional measurement is off. |
For pre-existing saved profiles, the inactivity period begins when this cleanup system is activated. Removing an inactive saved profile does not itself delete its separate Clerk login. You can request complete account deletion below.
A pending full-account deletion keeps only the provider identifier and retry timestamps needed to finish the request. App saves and contributions are removed first. If provider deletion is delayed, retries continue and requests waiting more than a day are flagged for owner attention. After completion, the provider identifier is removed and the remaining hashed receipt expires after 30 days.
When the deletion notification is configured, deleting an account through Clerk also removes its linked DropRank records. Previously published reviews are removed from the review list and rating averages. Independent copies already made by others and provider backups require separate handling.
Your data, your choice.
For help with an existing child account, a lost login or a cleared browser cookie, use our privacy request guide.
Copies held in provider backups follow the provider's deletion process. Contact support if you need a record of a full privacy request.