Privacy policy

Listings. The URL you submit, the title, description and icon fetched from that page, your chosen category, and any company details you add. All of this is public by design.

Payments. The amount, the time, and the payment provider's reference. Card details never reach Rivl. They are handled entirely by the payment provider.

Clicks. A count per listing. A number, not a log: we do not record who clicked.

Logos. A listing's icon is fetched by our server and re-served from rivl.lol, never loaded from the product's own site by your browser, so viewing the board tells nobody but us that you were here. When a site blocks our server outright, we ask a public favicon service (DuckDuckGo) for its icon instead. That request comes from our server and carries nothing about you: no IP, no referer, no cookie of yours ever reaches them.

No accounts, names, passwords or email addresses. No third-party analytics or advertising services, and nothing about your visit is sent to anyone else. No third-party cookies, no cross-site profiling, no fingerprinting. Nothing is sold or shared with advertisers.

Rivl publishes visitor numbers on its stats page, so it has to measure them. It does that itself, without cookies and without a third party.

When you load a page we record the path, the time, and the referring site's domain. To tell one visitor from another we combine your IP address and browser user-agent with a secret that changes every day, hash the result, and store only that hash. Your IP address itself is never written down.

Because the secret rotates at midnight UTC, the hash recorded for you today cannot be matched to the one recorded tomorrow. We can count how many people visited on a given day. We cannot follow anyone across days, build a profile, or work backwards to an address, not by policy, but because the data to do it does not exist.

Raw page views are kept for the current day only. At the end of each day they are reduced to two numbers (views and unique visitors), and the underlying rows are deleted.

Administrator pages, payment endpoints and checkout pages are never counted.

When you report a listing, your IP address is hashed and truncated before being stored. The raw address is never written down. It exists only to stop one person flooding the report queue, and cannot be reversed to identify you.

Bid submissions are rate-limited by IP in memory only. Nothing is written to disk, and it is discarded when the server restarts.

One cookie, and only for administrators signing in to moderate the board. It holds a signed session token and nothing else. Visitors and bidders are given no cookies at all, including for the visitor counting described above, which is why Rivl has no cookie banner.

Your light or dark theme choice is stored in your own browser and never sent to us.

A listing is public advertising you paid for, so it stays on the board. If you need it taken down, use the report control on its page and say so. Payment records are kept for accounting, as required.

See the terms for what a payment buys and what may be listed.