Privacy

01Who is responsible

The controller is Beable S.r.l., Via Morino 30, 00033 Cave (RM), Italy, VAT IT18535121000. Write to privacy@reachthetop.world about anything on this page.

02If you only look at the site

We count two things, and neither of them identifies you.

• Total views. When a tab opens the page it generates a random identifier in memory and sends it to us. It is never written to a cookie, to localStorage, or anywhere else on your device: close the tab and it ceases to exist. We add one to a per-day counter the first time we see it.
• People here now. That same identifier is stored server-side with a timestamp so we can count how many tabs checked in during the last 45 seconds. The row is deleted minutes after the tab stops checking in.

Because nothing is stored on your device, this needs no cookie banner and gives us no way to recognise you on a later visit. That is the point of building it this way.

Our hosting provider keeps ordinary server logs, including IP addresses, for a short period for security and abuse prevention. We do not use those logs for analytics.

03If you click a listing

Clicks are counted so the number shown on each row means something. We store the listing, the time, the browser's user-agent string, and a SHA-256 hash of your IP address combined with a secret salt. The address itself is never written to the database, and the hash exists only so the same person clicking twice in an hour counts once.

Legal basis: our legitimate interest in publishing a click count that is not trivially inflated (Art. 6(1)(f) GDPR). Click rows are deleted after 12 months.

04If you buy a listing

We store what you typed and what we need to keep for the sale:

• the listing itself — name, link, one line of pitch, category, and the icon fetched from your own website. This is published, because that is what you bought.
• your email address, to send the receipt and to reach you about moderation or a refund;
• the amount, the time, and the identifier of the payment at Polar;
• the timestamps of the two consent boxes you ticked, which are the evidence that immediate activation was requested.

Legal bases: performance of the contract (Art. 6(1)(b)) for the listing and receipt, and a legal obligation (Art. 6(1)(c)) for the accounting records.

We never see your card details. Payment is taken by Polar Software Inc. as merchant of record; they collect what they need under their own privacy policy.

05Who else touches the data

• Polar Software Inc. — payments, invoicing and tax. Merchant of record, and an independent controller for what they collect.
• Vercel Inc. — hosting and delivery of this site.
• Neon / Supabase — the database the listings live in.
• Resend — sending the receipt email.

Some of these are outside the EEA. Transfers are covered by the European Commission's standard contractual clauses. We do not sell or share personal data with anybody else, and there is no advertising network on this site.

06How long we keep it

• Listings: while they are on the board, and for as long as the payment records require.
• Payment and consent records: 10 years, as Italian accounting law requires.
• Click rows: 12 months.
• Presence rows: minutes.
• Abandoned checkouts: 90 days.

07Your rights

You can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to processing based on legitimate interest, or ask for it in a portable format. Write to privacy@reachthetop.world and we will answer within 30 days.

Deleting a published listing removes it from the board. It does not remove the payment record, which we are required to keep.

If you think we have got this wrong you can complain to your national data protection authority — in Italy, the Garante per la protezione dei dati personali.

08Children

This is a service for businesses. It is not directed at children and we do not knowingly collect anything from them.