Privacy Policy

At Apex Perks, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application.

This policy applies to all visitors of Apex Perks. Where we rely on your consent, such as for analytics cookies, we ask for it separately through our cookie banner, and you can withdraw it at any time.

The data controller for your personal information is:

We may collect the following types of information:

• Usage Data: Information about how you interact with our service, including pages visited, time spent on pages, and features used
• Technical Data: Your IP address, browser type and user agent, device information, and operating system, received by our servers and our content delivery network when you load pages or vote
• Voting Data: The perks you vote for, with the rank, platform, and region you select. To prevent duplicate votes, we keep a hashed (SHA-256) version of your IP address and user agent for 48 hours; votes are then only kept as aggregated counts that do not identify you
• Local Storage: Your vote history and display preferences (rank, platform, region), stored only in your browser
• Approximate Country: Derived from your IP address by our content delivery network (Cloudflare), only used to decide whether to ask for your cookie consent, and not stored on our servers

We do not collect names, email addresses, or phone numbers unless you voluntarily provide them, for example when contacting us.

We use the collected data for the following purposes:

• To provide, maintain, and improve our service
• To aggregate voting data and display community statistics
• To detect, prevent, and address technical issues and errors
• To ensure the security and integrity of our service
• To measure audience and usage of the service with Google Analytics, in order to improve it
• To prevent duplicate or abusive votes

Providing the service, vote integrity, and security are based on our legitimate interest in running a reliable and fair service. Audience measurement is based on your consent in the European Economic Area, the United Kingdom, and Switzerland, and on our legitimate interest elsewhere (see section 6).

We do not use advertising cookies. We use your browser's local storage for features that are strictly necessary for the service to work, and Google Analytics cookies to measure audience. In the European Economic Area, the United Kingdom, and Switzerland, analytics cookies are only set with your consent.

Types of storage we use:

• Essential Storage: Your votes (kept for 24 hours) and display preferences (rank, platform, region, kept for 7 days), stored in your browser's local storage so the service can remember them
• Analytics Cookies: Google Analytics cookies (_ga, _ga_<ID>), kept for up to 13 months, used to measure how the service is used
• Consent Choice: your cookie choice, kept in local storage for 6 months
• Session Storage: Your detected country and a technical analytics marker, deleted when you close the tab

You can change your cookie choice at any time with the "Update consent preferences" link in the footer. You can also clear this data through your browser settings; if you do, your saved votes, preferences, and cookie choice will be reset.

We use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC, to measure audience and usage: pages visited, interactions with features (search, votes, chart filters), page performance, approximate location, and device and browser information. IP addresses are not logged or stored by Google Analytics 4. Advertising features and data sharing for advertising are disabled.

In the European Economic Area, the United Kingdom, and Switzerland, this processing is based on your consent. Without consent, Google Analytics still loads but only receives cookieless pings (page viewed, time, browser and device information): no identifier is set on or read from your device, and Google uses these pings to model aggregated statistics. Elsewhere, it is based on our legitimate interest in understanding how the service is used, and you can object at any time with the "Update consent preferences" link in the footer.

Data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and transfers are also covered by the European Commission's Standard Contractual Clauses. Analytics data is retained for up to 14 months.

Our website is delivered through Cloudflare, Inc. (content delivery network and security), which processes your IP address to deliver pages, protect the service against attacks, and determine your approximate country. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Our servers are hosted by OVH SAS (see our Legal Notice).

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

Specifically:

• Hashed IP address and user agent (duplicate vote prevention): 48 hours
• Votes: kept only as aggregated counts that do not identify you
• Google Analytics data: 14 months; Google Analytics cookies: up to 13 months
• Cookie choice: 6 months, after which we ask you again
• Emails you send us: as long as necessary to handle your request

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

You have the right to:

• Access: Request copies of your personal data that we hold
• Rectification: Request that we correct any inaccurate or incomplete data
• Erasure: Request that we delete your personal data under certain circumstances
• Restrict Processing: Request that we restrict the processing of your personal data
• Data Portability: Request that we transfer your data to another service provider
• Object: Object to our processing of your personal data
• Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal data

To exercise any of these rights, please contact us at [email protected].

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), or with your local supervisory authority.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.

California residents have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Delete: Request deletion of your personal information, subject to certain exceptions
• Opt-Out: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising
• Non-Discrimination: Not receive discriminatory treatment for exercising your CCPA/CPRA rights

We do not sell or share your personal information for cross-context behavioral advertising.

We will not discriminate against you for exercising any of your CCPA/CPRA rights. To submit other privacy requests (access, deletion), please contact us at [email protected].

The security of your data is important to us. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Our service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so that we can delete such information.

In France, users under 15 need the consent of a parent or guardian to accept analytics cookies.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.