Privacy Policy

What we collect

• Your email address. It is your account. We use it to sign you in, to send emails about your purchases, reminders before a handle ends, and replies to your messages.
• Sign-in codes. Stored only as a keyed hash. A code works for 10 minutes. The record of a code request (the email it went to, the hash and the count of codes sent that day, which enforces the daily limit) is deleted within 2 days of the last code sent.
• Session cookies. __Host-ira_s, __Host-ira_co and __Host-ira_pv, described under Cookies.
• Order records from Stripe. What you bought, the amount and tax, the payment date, Stripe's payment references, the billing country, the email given at checkout, and the version of the terms you accepted. Stripe handles your card; we never receive or store a card number.
• IP addresses, stored only as keyed hashes. A one-way hash made with a secret key, used for rate limits and fraud prevention. We do not store your IP address itself.
• The user agent and country of each order, and the user agent of each sign-in session. The browser description your device sends and the country your connection came from, kept with the order as evidence in case a payment is disputed. Each session keeps the browser description and a keyed hash of the IP address it signed in from, for security.
• Your handles. The names you hold, the destination you set and when you set it, and visit counts. Visit counts are aggregate totals with no visitor identifiers: we do not record who visited, and handle pages set no cookies. Handle pages also send no analytics: Cloudflare adds the Web Analytics script described below to them too, but their security policy stops it from sending anything.
• Reports and support mail. What you send us through the report form or by email, and our replies.
• Daily counters. Aggregate totals, such as how many checkouts started on a day, with no identifiers attached.
• Cloudflare request logs. Our hosting provider keeps standard request logs, including IP addresses, to deliver and protect the site.
• Cloudflare Web Analytics. Cloudflare adds a small script to the pages of this website that measures how each page loads. On handle pages it can send nothing, as described above. On every other page, for each page load it sends Cloudflare the page address and the address of the page you came from (both without anything after a question mark or # sign), your browser and operating system with their versions, how quickly the page loaded and responded, which part of the page, such as a button, was slowest to respond to you and whether you used a keyboard or a pointer there, how much memory the page's scripts used (in browsers that report it), and a random code for that one page load. Like any request, each report reaches Cloudflare with your IP address and the browser description your device sends, and from them Cloudflare works out your country and your type of device, such as phone or desktop. The script sets no cookies and stores nothing on your device. Cloudflare says Web Analytics does not use visitors' personal data and does not follow individual visitors across websites.

How we use it

• To run your account and deliver what you bought: sign-in, forwarding, visit counts, the board and reminders.
• To take payments, issue refunds and answer payment disputes.
• To prevent fraud and abuse, including checking destinations for unsafe links.
• To answer your messages and reports, and to meet our tax and legal obligations.
• To see which pages are used, where visitors arrive from and how fast pages load, from Cloudflare Web Analytics.

We do not sell your personal information, and we do not share it for advertising.

Who processes it

• Stripe processes payments. Checkout runs on Stripe's own page, and Stripe receives your card details, billing address and email under its privacy policy.
• Cloudflare hosts the site and our database, sends and receives our email, and runs Cloudflare Web Analytics for us, under its privacy policy.
• Google Web Risk checks destinations against Google's lists of unsafe sites. When a destination is set, and when we check it again later, we send Google the destination URL and nothing else.

We share information otherwise only when the law requires it, or to protect people from fraud or harm.

What is public

A handle and where it forwards are public by nature: anyone who visits the address sees the destination. If you buy board spend, your handle, rank and season total appear on the public board and stay in its archives after the season closes. A visitor who follows a handle arrives at its destination as from any other link, and the destination can see that the visit came from isreallyamazing.com. Your email address is never shown publicly.

Cookies

We use one essential cookie for sessions, plus two short-lived cookies that exist only in the situations below. All three are first-party, sent only over https and unreadable by page scripts. There are no advertising or analytics cookies. Cloudflare Web Analytics works without cookies.

• __Host-ira_s: keeps you signed in. It lasts up to 90 days, or 30 days until you confirm your email with a code.
• __Host-ira_co: set when you check out without signing in, so the device that paid can be signed in afterwards. It lasts 2 hours.
• __Host-ira_pv: a preview cookie that lets us try the site before it opens to everyone. It lasts 7 days and is never set for customers.

Do Not Track

We do not track you across other sites, so we do not respond to DNT signals differently. No third party collects personal information about you across other sites through our pages: the only other company our pages load anything from is Cloudflare, for Web Analytics, and Cloudflare says it does not follow individual visitors across websites.

How long we keep it

• Paid order records, including the email on them: 7 years, for tax and payment dispute obligations, even after you delete your account.
• Checkouts that were started but never paid: deleted after 30 days.
• Sessions: up to 90 days.
• Sign-in codes: each works for 10 minutes and is stored only as a keyed hash. The record of a code request, with the email it went to, is deleted within 2 days of the last code sent.
• Our record of emails we send you (the email outbox), including any that could not be delivered: 90 days.
• Reports and support mail: until the conversation is resolved, then 2 more years.
• Rate-limit counters: 2 days.
• Payment event records from Stripe: 180 days.
• Accounts that never confirm their email and never complete a payment: deleted after 7 days.
• Destination check results: 6 hours for a clean result, or until Google's own result expires.
• Cloudflare Web Analytics records: Cloudflare keeps every record for 7 days, then keeps about 1 in 10 of them long term and publishes no end date for those. Our dashboard shows the last 6 months.

Your choices

• Access and correction. Your account page shows your handles, destinations, receipts and settings. For a copy of what we hold about you, or to correct it, email support@isreallyamazing.com.
• Deletion. Delete your account from your account page or by email. Deleting erases the email on your account, signs you out everywhere, stops your addresses and returns them to sale, and hides your rows from the board. Order records are kept for 7 years, as the law requires.
• Email. Expiry reminders and the optional notice when someone passes you for #1 can be turned off from your account page or from a link in those emails. Sign-in codes and emails about your purchases are sent while you have an account.

Children

The site is not directed to children under 13, and we do not knowingly collect their information. Purchases are for people 18 and older.

Changes and contact

If this policy changes, we update the effective date above and email account holders about material changes before they take effect. Questions about privacy go to support@isreallyamazing.com.

If you bought in the iPhone app

This section covers the Is Really Amazing iPhone app. It sells through Apple's App Store and is separate from accounts on this website.

• Game Center identity. The app signs you in with Apple's Game Center. We receive your Game Center player identifier (an identifier Apple generates for this app) and your Game Center display name. The app has no email sign-up and no password.
• Purchase records. In-app purchases go through Apple, and we never see your payment details. After a purchase our server verifies it with Apple and records the transaction identifier, product, amount and time against your player identifier.
• Handles bought in the app. The same handle data as above: the name, the destination you set and the visit counts.
• Anonymous analytics and crash reports. The app uses Firebase, a Google service, for crash reporting and basic usage analytics, such as which screens are used and whether a purchase completed. It uses no advertising identifier and does not track you across other apps or websites. In the EU, UK and Switzerland both are off until you allow them; elsewhere crash reporting is on by default and usage analytics turns on automatically. You can turn either off at any time in the app's Settings ("Share anonymous usage data").
• What is public. Your Game Center display name, rank and season total appear on the board in the app and on this website. Change the display name in your Apple account settings and the board follows. To have your name hidden from the board or its archives, email support@isreallyamazing.com and identify your entry; the purchase records stay, as required for accounting and fraud prevention.
• Refunds. When you ask Apple for a refund, we answer Apple's questions about delivery and use from our records, as the Terms describe.