Privacy

Your account. Your name and email address. If you sign in with Google we also store the account identifier Google gives us and the email address on it, so we can recognise you next time. If you registered with a password instead, it is stored hashed and cannot be read back by us or anyone else.

Voting and nominating. Which competition and entry you chose, and your browser's user agent. We also store a one-way hash of your IP address — a scrambled fingerprint computed with a secret key. We do not keep the address itself, and the hash cannot be reversed back into one.

Business page visits. Which business you looked at, the date, the site that referred you, and the same kind of hashed IP fingerprint. Repeat visits on the same day count once, so a refresh is never a second view.

Outbound clicks. When you follow a business's website, Instagram or WhatsApp link, we record which business and which kind of link, with a hashed IP. This is how a business can see that RankNaija sent it real visitors.

Backing payments. The amount, currency, status, a payment reference, and the response our payment provider returns to us. That response can include limited card metadata such as the last four digits and the card type. We never receive or store full card numbers — card details are entered on Paystack's own checkout, not on RankNaija.

Business claims. If you claim a business, the role you say you hold and any phone number, email address or note you choose to give us, so a person can check the claim.

Administrator actions. When an administrator approves a nomination, changes a competition or reviews a claim, we log what they did and their IP address in full. This applies to our staff, not to visitors.

• To keep competitions fair — one vote per person, per competition.
• To show businesses how much traffic their profile earned.
• To take and confirm backing payments.
• To detect and stop abuse, such as vote manipulation.
• To keep an honest record of the decisions our administrators make.

Competition standings, vote counts and business profiles are public. Who voted, and who backed whom, is not. We never publish the identity of a voter or a backer, and no page or API response exposes it.

We do not sell personal data and we do not share it for advertising. We use a small number of providers to run the service:

• Google — sign-in, if you choose it. Google tells us your name, email and account identifier.
• Paystack — payment processing. Card details go to Paystack directly.
• Vercel and Cloudflare — hosting and delivery of the site, and protection for our API.
• Amazon Web Services — the servers and database that hold this data, located in the United States.

We may also disclose information where the law requires it, or where it is necessary to investigate abuse of a competition.

We set two cookies, both necessary: one that keeps you signed in, and one that protects forms against cross-site request forgery. We do not use advertising cookies, and we do not run third-party analytics or tracking scripts.

Your account and its data are kept while your account exists. Votes, backings and results are kept as part of the permanent public record of a competition — a past result would stop being true if we deleted the votes behind it. If you close your account, records that must stay accurate are retained without your name attached to them.

Under the Nigeria Data Protection Act 2023 you may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to hello@ranknaija.com and we will respond within 30 days.

RankNaija is not intended for anyone under 18. We do not knowingly create accounts for children, and we will delete one if we learn of it.

If we change how we handle your data we will update this page and the date at the top. Continuing to use RankNaija after a change means you accept it. See also our Terms.