Draft. This document has not yet been reviewed by an attorney and may change.
Privacy Policy
Friends of Play and Prosper LLC ("we") runs counthis.app. This policy explains what we collect, why, and what you can do about it. We collect as little as the Service needs, we do not sell personal information, and we do not use advertising or analytics trackers.
What we collect
When someone views a badge
Every badge request reaches our servers with the viewer's IP address, browser type (user agent), the badge's address and, often, the address or site of the page showing it. To count each visitor only once every six hours and to filter out bots, we:
- reduce the visitor's network (the IP address, or for IPv6 its /64 network) and user agent to a scrambled 64-bit number, using a random key that exists only in the server's memory and changes every time the server restarts;
- keep that number in memory for six hours, then discard it;
- look up which network operator the address belongs to, to leave out traffic from hosting providers.
The counthis software does not write viewers' IP addresses or user agents to disk. Reverse proxies and hosting infrastructure in front of the Service may keep standard access logs, which can include IP addresses and request addresses, for a limited time for security and abuse prevention.
Images loaded in GitHub READMEs are fetched by GitHub's image proxy, so for those views we receive GitHub's details rather than the reader's.
Counters
For each counter we store a number, the time it was created and the time it last changed. Counters are stored under an identifier derived from the counter's name with a secret key; the stored data does not contain the name. Our administrators see identifiers and numbers, not names.
Accounts
If you create an account we store your email address, the names you have claimed and how you verified them, your counters and their labels, and sign-in records (time and the network the sign-in was requested from). Names are stored encrypted, readable by your account.
Payments
- Card payments are handled by Stripe on its own checkout page, which collects your card details and the email address for your receipts directly; we never see or store card numbers. We send Stripe only an opaque account number and order number, never your counthis email address or counter names. We keep the Stripe customer and subscription identifiers, amounts and dates.
- RLUSD payments, including payments made by software through our API (x402), happen on the XRP Ledger. We record the sending wallet address, transaction identifier, amount and date. The ledger only ever sees our receiving address, a random destination tag or invoice hash, and the amount, never your account details. The XRP Ledger is public: anyone can see ledger transactions, and they cannot be deleted by anyone, including us. Payment reminders we send on the ledger go only to the address that paid and contain the plan's end date and a link to renew, nothing else.
We keep payment records as long as tax and accounting laws require.
We send sign-in links, receipts and payment reminders. Depending on configuration these go through our own mail server or a delivery provider (such as Resend or Twilio SendGrid), which processes your email address to deliver them. We send no marketing email without your consent.
Why we use it
- To provide the Service you ask for: counting, showing badges, accounts and subscriptions (performance of a contract).
- To keep counts fair and the Service secure: deduplication, bot filtering, rate limits and abuse investigation (legitimate interests).
- To meet legal obligations, such as tax records (legal obligation).
Who we share it with
Only service providers that help us run the Service: hosting and object storage (for example DigitalOcean or OVHcloud), email delivery, Stripe, an XRP Ledger server we query and submit payments through, and our secrets manager. They may process data only on our instructions. We disclose information when the law requires it. If the business is transferred, this policy continues to apply to data collected under it.
Our administrators can look up counters by their ID and see their values and the account that owns them, but our admin tools never show counter names. Accounts are listed by a masked email address unless an administrator searches for an exact address.
Where it is kept
Our servers are in the United States and may be in other countries where our providers operate. If you are outside the United States, your information is transferred there; see the GDPR notice for how we protect transfers from the EEA, UK and Switzerland.
How long we keep it
- Visitor numbers used for counting: six hours, in memory only.
- Counters: while they are active. Inactive counters are deleted 17 months after the last payment reminder.
- Accounts: until you close them, then deleted within 30 days, except records we must keep by law.
Your choices and rights
You can view and change your counters from your account, and close your account at any time. You may ask us to access, correct, delete or export your personal information, or object to how we use it, by emailing privacy@counthis.app. We will answer within 30 days. Depending on where you live (for example under the GDPR or California law) you may have additional rights; we honor them as the law requires. We do not sell or share personal information for cross-context behavioral advertising.
Children
The Service is not directed to children under 13, and accounts require you to be at least 16. See our Children's Privacy Policy.
Security
We protect data with encryption in transit, encryption of secrets and claimed names at rest, access controls on administrative tools, and by not collecting what we don't need. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.
Cookies
See the Cookie Policy. In short: badges set no cookies, and the site uses only the cookies needed to sign you in.
Changes
We will post changes here with a new effective date and email account holders about material changes.
Contact
Friends of Play and Prosper LLC, reachable by email. Email: privacy@counthis.app.