This policy explains what information theyseemescrollin.com handles, why, and what your choices are. The site is run by They See Me Scrollin, an individual based in the UK, who is responsible for your information (the “data controller”). The quickest way to reach me about anything in this policy is the contact form.
What the site stores
If you just browse
You don’t need an account to use the site. The map remembers which markers you’ve found, any markers you’ve added or edited, and which layer and filters you last used. Tier lists you rank without logging in are kept as a draft. Both are saved in your own browser’s local storage, on your device only, and are never sent to me. To remove them, use the map’s Reset and Restore buttons, or clear this site’s data in your browser settings.
If you create an account
Accounts are optional and are only for saving tier list rankings. When you sign up and use an account, the site stores:
- Your username, email address and display name. Your email is used only for account emails such as the sign-up link and password resets. It is never shown publicly or used for marketing.
- Your password, stored in scrambled (hashed) form so nobody, including me, can read it. When you choose a password, the site checks it isn’t on a public list of passwords leaked in data breaches, using the Have I Been Pwned service. Only the first five characters of a scrambled version of your password are sent, so the service never learns your password.
- The tier list rankings you save, and when you saved them.
- That you confirmed you’re 13 or over, and when.
I use this information to run your account, which is the service you asked for. Saved rankings count anonymously towards each community tier list. Your display name is only shown next to a ranking if you choose to make it public, and you can switch that off again at any time from your account page. Anyone with a ranking’s share link can see that ranking, but without your name unless you made it public.
If you sign up but never set your password from the email you’re sent, your account is deleted automatically after 7 days.
Comments
If you leave a comment, the site stores the name, email address and comment you enter, plus your IP address and browser details to help stop spam. Your name and comment are shown publicly; your email address is not. Comments are checked for spam by Akismet (run by Automattic).
Contact form
Messages sent through the contact form, including your name, email address and anything you write, are emailed to me and kept on the site so I can reply. I delete them after 12 months, or sooner if you ask.
Who can have an account
You need to be 13 or over to create an account. If I find out an account belongs to someone younger, I’ll delete it.
Cookies and analytics
When you first visit, a banner asks whether you’re happy for optional cookies to be used. Statistics cookies from Google Analytics (with IP addresses anonymised) are only set if you click Accept. Logging in sets cookies that keep you signed in; these are needed for the account to work. Full details are in the Cookie Policy, and you can change your choice at any time from the link in the footer.
The site doesn’t show ads. If that changes, this policy will be updated first, and you’ll be asked before any advertising cookies are set.
Other services the site uses
- Hosting: Bluehost hosts the site. Like most web servers, theirs keep short-term logs of requests, including IP addresses and browser type, for security and to keep the site running.
- Security: Wordfence (run by Defiant) checks visits and log-in attempts for attacks, which involves processing IP addresses.
- Jetpack and Akismet: Automattic provides site tools, the contact form and spam checks for comments and messages.
- Google Analytics: only if you accept statistics cookies. See Google’s privacy policy.
- Map page: the map loads typefaces from Google Fonts and the Leaflet map library from cdnjs (run by Cloudflare). Your browser connects to their servers, which receive your IP address.
- Have I Been Pwned: the password check described above.
- YouTube: links to videos open YouTube, where Google’s own privacy policy applies.
Some of these companies are based in the United States. They protect UK data using safeguards approved under UK law, such as the UK–US data bridge or standard contractual clauses.
How long information is kept
- Account details and saved rankings: until you delete them or your account.
- Unconfirmed sign-ups: deleted after 7 days.
- Contact messages: 12 months.
- Comments: for as long as they’re published, unless you ask me to remove them.
- Backups: copies of the site are kept for a limited time so it can be restored if something goes wrong, then overwritten.
Your rights
Under UK data protection law you can ask for a copy of the personal information held about you, ask for it to be corrected or deleted, and object to how it’s used. If you have an account, you can delete any ranking, all your rankings or the whole account yourself from your account page. For anything else, use the contact form and choose “Privacy request”. I’ll reply within one month.
If you’re unhappy with how your information has been handled, please tell me through the contact form first. I’ll acknowledge your complaint within 30 days and let you know the outcome. You also have the right to complain to the Information Commissioner’s Office.
Changes to this policy
If anything here changes, I’ll update this page and the date at the top.