Legal
Privacy policy
What we collect, why we collect it, who else touches it, and how to make us delete it. Short, because we collect little.
Last updated 1 September 2026
The short version
- You can read every ranking on this site without an account and without being tracked.
- We run no advertising trackers, no third-party analytics pixels and no cross-site profiling.
- We never sell personal data, and advertisers never receive it.
- Ads on this site are served by us and targeted by page topic only — never by who you are.
- You can have your account and reviews deleted by asking.
1. What we collect
- If you only read the site
- Nothing that identifies you. Our servers keep short-lived operational logs, and we count ad impressions and clicks in aggregate so advertisers can be billed honestly. Those counts are totals per placement, not records about a person.
- If you create an account
- Your email address, an optional display name, and a hashed password. We store a hash — never the password itself. We record whether the address has been verified, because a review may only be labelled as coming from a verified user once it actually has been.
- If you write a review
- Your rating and the text, pros, cons and use case you submit, together with the date. A published review is public by design. Do not put anything in it that you would not want read by anyone, and do not include personal details about other people.
- If you claim a platform profile or buy advertising
- Your business name, your work contact details, and the evidence you send to prove you are authorised to represent that business. For advertisers we also keep the commercial record: campaigns, delivered impressions, invoices and credits.
- If you email us
- Your message and address, kept as long as needed to deal with it.
3. Why we are allowed to hold it
Under GDPR terms: account data and business records are processed to perform our contract with you. Review moderation, fraud prevention, impression counting and site security rest on our legitimate interest in running an honest ranking. Where we ask for consent — a research mailing, for example — you can withdraw it at any time, and the withdrawal takes effect for the future.
4. Who else touches your data
We keep this list short deliberately, and it is complete:
- Railway
- Hosting and the PostgreSQL database. All application data lives here.
- Cloudflare
- DNS resolution for this domain.
- Resend
- Transactional email only — address verification, review notifications, claim decisions and invoices. No marketing sends without consent.
- Anthropic
- Used to measure platforms, never to process people. Our measurement asks an answer engine category-level buying questions containing no brand names, and reads public web pages about the platforms we rank. Your account details, your review text and your business correspondence are never sent to it.
Some of these providers operate outside your country, including in the United States. Transfers rely on the providers’ standard contractual clauses.
5. Advertising
Ads are chosen by the topic of the page you are reading and by our own delivery pacing — not by anything about you. We do not build audience profiles, we do not run retargeting, and we pass no personal data to advertisers. An advertiser sees how many impressions and clicks their campaign received; they never see who produced them.
Advertising also has no effect on rankings. That is a methodology commitment, enforced in code, not a promise.
6. How long we keep it
- Account data — while the account exists, then deleted on request.
- Published reviews — kept while published; deleting your account removes them.
- Rejected reviews — kept briefly, then removed with the moderation record.
- Invoices and billing records — kept as long as accounting law requires, typically seven years. These we cannot delete on request.
- Operational logs — days, not months.
7. Your rights
You can ask for a copy of your data, correction of anything wrong, deletion, restriction of how it is used, or transfer of it elsewhere. You can also object to processing based on legitimate interest. Write to privacy@top10platforms.com and we will respond within thirty days. If we handle it badly, you can complain to your national data protection authority.
8. Children
This site is for professional and commercial decision-making and is not directed at children. We do not knowingly hold data about anyone under sixteen; tell us if you believe we do and it will be deleted.
9. Security
Everything is served over TLS. Passwords are hashed. Sessions are signed and expire. Administrative pages are gated at the edge and verified again on the server. No system is perfect: if a breach ever affects your data, we will tell you and the relevant authority within the time the law requires.
10. Changes
If this policy changes materially — a new processor, a new purpose — we will update the date above and, where it affects you directly, tell you by email rather than relying on you to re-read this page.