Privacy Policy

1. Who we are and our role

RankifyMe is a sports competition management service operated by Codedrops Solutions DOO, registered in Belgrade, Serbia · Registration number: 21572080 · Tax identification number (PIB): 111925187. You can reach us about anything in this policy at support@rankifyme.com.

RankifyMe is used by organizers to run competitions and by players who take part in them. Some information in the service is entered by you about yourself; other information is entered by an organizer about participants in their competition.

For account administration, operation and security of the service, support, and RankifyMe's own subscription and entitlement records, Codedrops Solutions DOO acts as the controller of the personal data it determines how and why to process. Where an organizer decides what participant information to enter for their competition and uses RankifyMe to store and manage that information, the organizer may act as the controller for that competition data and RankifyMe may process it on the organizer's behalf, depending on the circumstances and applicable law.

Organizers are responsible for having an appropriate basis for the participant information they choose to record and for limiting it to what their competition reasonably needs.

2. We do not sell personal data

We do not sell personal data. We do not trade it, and we do not make it available to third parties for their own marketing purposes.

3. Information we process

Account and authentication data

When you create an account we process the identifiers needed to sign you in and identify you in the product, such as your email address, authentication data held by our authentication infrastructure, and your application profile details, for example a display name and, if you add one, an avatar image.

Competition, participant and player data

Organizers create competitions and enter the records the competition needs. Depending on how the competition is configured, this can include participant and team names, contact details, rosters, profile and sports details, optional profile images, venues and courts, rounds, matches, rules and announcements. Profile and sports details can include information such as date of birth, height, weight, dominant hand or foot, or playing position where those fields are used. This information is processed so the competition can function.

Availability data

When a player submits availability for a round, we process the time windows and related preferences they submit, together with the round, venue and court context, so schedule suggestions can be generated and reviewed by the organizer.

Match, result and standings data

We process scheduled fixtures, submitted scores, who submitted them, organizer approvals or rejections, official results, and the standings calculated from them. This forms part of the historical sporting record of the competition.

Images and profile media

Where participant or profile imagery is used, it is stored by our storage infrastructure. Depending on how the product exposes an asset, an image may be served from a public storage URL and may therefore be accessible to anyone who has that public asset URL.

Communications

We process in-app notifications and transactional emails related to your account and competitions, including participant invitation emails and match, schedule and result notifications, together with your application email-notification preferences. If you email us, we process that correspondence in order to answer it.

Subscription and purchase data

When paid self-service billing is available and you start or manage a Pro subscription, customer and purchase information is shared with and processed by Paddle for checkout, payment, tax and compliance, invoices and receipts, subscription management, refunds and billing support.

RankifyMe keeps the subscription and entitlement information needed to display and enforce your plan, such as subscription status, trial and billing-period dates, subscribed amount and currency, scheduled cancellation state, and provider references needed to keep our records synchronized with Paddle. RankifyMe does not store your full payment-card details and does not copy Paddle-held billing-address, company, tax-identification or payment-method details into its application database merely to operate plan access.

Operational and service data

Running a hosted service produces technical and operational data, such as server and application logs, error and diagnostic information, and security-related records. We use it to operate, secure, debug and improve the service.

Advertising measurement for paid visits

When you arrive through a Google ad carrying a recognized Google advertising click reference, RankifyMe shows a first-party choice before capturing or measuring that paid visit. If you select Accept, we store an anonymous acquisition touchpoint containing the validated click reference, the landing page and language, permitted campaign parameters, and the consent choice current at capture. We return an opaque token to the browser so that, if you later create or use an account, the touchpoint can be associated with that account without exposing the advertising reference to the RankifyMe application.

With that consent, RankifyMe measures on its servers whether the paid visit leads to an account signup, organizer activation, Pro trial or first paid subscription, and sends the permitted conversion and match data to Google Ads through Google's Data Manager API. Email match data is included only when the accepted consent permits advertising user data. Selecting Reject creates no touchpoint and sends no advertising conversion for that visit. RankifyMe does not use this system for advertising personalization and does not create a remarketing audience.

You can reopen the same choice at any time with Cookie settings in the footer. Changing the choice governs later eligible paid visits; it does not undo processing that was lawful before the change.

4. Why we process information and our legal bases

The legal basis we rely on depends on the information and the purpose for which it is used. Depending on the circumstances, we process personal data:

• To perform a contract or take requested steps before a contract — for example to create and operate your account, provide RankifyMe features, administer a Pro subscription, and provide support you request.
• For our legitimate interests — for example to secure the service, prevent abuse, diagnose problems, improve reliability, operate our business, and preserve the integrity of competition records, where those interests are not overridden by your rights and interests.
• To comply with legal obligations — including obligations relating to accounting, tax, lawful requests and other compliance requirements that apply to us.
• With consent where consent is the appropriate basis — in which case you may withdraw that consent at any time without affecting processing that was lawful before withdrawal.

Where we process participant information on an organizer's behalf, the organizer is responsible for the legal basis on which they collect and use that information, while we process it in order to provide the service and in accordance with the applicable arrangement and law.

5. Service providers, billing reseller and infrastructure

We use third-party infrastructure providers to run RankifyMe and an authorized reseller for paid subscription purchases:

• Supabase — application database (PostgreSQL), authentication and profile infrastructure, and storage for application assets such as participant or profile imagery.
• Resend — delivery of production application email, including transactional, invitation and notification email.
• Paddle — Merchant of Record and authorized reseller for paid RankifyMe subscriptions. Paddle processes customer and purchase information needed for checkout, payment, tax and compliance, invoicing and receipts, subscription management, refunds and billing support. See Paddle's Privacy Notice.
• Google Ads — recipient of consented server-side conversion measurement and permitted match data for recognized Google paid-acquisition visits. RankifyMe does not send advertising conversions after rejection and does not create advertising-personalization or remarketing audiences.
• Hosting and operational infrastructure needed to serve the application and this website.

Paddle's own notices govern the information Paddle processes in its Merchant of Record role. We may also disclose information where we are legally required to do so, or where it is necessary to protect the service, our users or our rights.

6. Retention

We keep personal data only for as long as reasonably necessary for the purposes it was processed for. In practice that means for as long as needed to:

• provide and operate the service;
• maintain accounts and subscription records;
• maintain competition and historical sporting records where the product needs them to remain coherent;
• comply with applicable legal obligations;
• resolve disputes;
• prevent abuse and protect the service.

Unclaimed anonymous advertising touchpoints expire after 30 days. Once a touchpoint is associated with an account, RankifyMe retains it for up to 120 days from capture, then deletes it in the retention sweep. The 120-day limit covers the measurable click-to-signup, trial and first-paid journey while keeping the advertising reference for a bounded period.

When information is no longer needed for those purposes it is deleted or anonymized, subject to reasonable backup and technical retention cycles. Competition history — including matches, results and standings — is part of the sporting record of a competition. Removing an account does not necessarily erase every historical reference to a participant in past matches, results or standings where that record needs to stay intact.

7. Your rights, choices and requests

Depending on the circumstances and applicable law, you may have the right to ask us to:

• give you access to personal data we hold about you;
• correct inaccurate or incomplete personal data;
• delete personal data where the law gives you that right;
• restrict certain processing;
• provide certain data in a portable form;
• stop processing based on consent by withdrawing that consent;
• object to processing based on legitimate interests.

You can review and update certain profile details in the application and manage your application email-notification preferences there.

If your data was entered by an organizer as part of their competition, it may be quickest to raise the request with that organizer as well, but you can always contact us. We may need to verify your identity or your relationship to the relevant account before acting on a request, and some rights may be limited where the law permits or requires us to retain information.

Send privacy requests to support@rankifyme.com. Where applicable, you may also raise a concern with the competent data protection authority, including the Serbian Commissioner for Personal Data Protection.

8. Security

We take reasonable technical and organizational measures to protect the information in the service, including the security features of the infrastructure we build on. No online service can promise absolute security, and we do not claim to. If you believe you have found a security issue, please tell us at support@rankifyme.com.

9. Children and minors

RankifyMe may be used for competitions that include participants who are minors. Where an organizer records information about a minor, the organizer is responsible for having an appropriate legal basis or authority to do so and for limiting the information to what the competition reasonably needs.

Where a minor uses RankifyMe directly, any consent or involvement of a parent or guardian that is required by applicable law remains the responsibility of the relevant user and organizer.

If you are a parent or guardian and have questions or concerns about personal data relating to a minor in RankifyMe, contact us at support@rankifyme.com.

10. International processing

Our service providers may process and store information on servers located in more than one country. Where an international transfer requires additional safeguards under applicable data-protection law, we rely on legally recognized transfer mechanisms such as applicable adequacy decisions, standard contractual safeguards, or another valid transfer mechanism provided by law. You may contact us if you want more information about the safeguards relevant to a particular transfer.

11. Changes to this policy

We may update this policy as the product develops or legal requirements change. When we make a material change we will update the date at the top of this page and, where appropriate, notify affected users.

12. Contact and company details

Questions, privacy requests or complaints about this policy: support@rankifyme.com.

Codedrops Solutions DOO, registered in Belgrade, Serbia · Registration number: 21572080 · Tax identification number (PIB): 111925187.