Privacy

The controller for personal data processed through this Service is Fernando Monja, an individual based in Peru, at brandcity.lol.

For anything in this policy — a copy of your data, a correction, a deletion, or an objection — write to fernandomonjav@gmail.com.

This site sets no cookies at all — not for sessions, not for analytics, not for advertising. Nothing about you follows you to another site.

Your browser remembers one thing, in its own local storage and never sent anywhere: that you have already seen the hint about tapping a place. That is it.

There is no sign-up. The address you paste is the identity: everything a site holds on the map is found by its domain, by anyone who types it.

• Your email address, collected by Dodo Payments at the checkout and passed to us with the confirmation. It is kept to reach you about your own spot and for nothing else. No newsletter, and it is never sold or shared.
• What you paid, and for which spot. Every payment is kept, and so is the total it adds up to on that spot. Both are public: the leaderboard is ranked by what a brand has paid, and each spot shows what everybody on it has put in.
• Your site’s own tags — its address, name, description, theme colour and a copy of its favicon, read from the page at the moment you pay. All of it is already public on your own site, and all of it is shown on the map.

• A random number for the tab you have open, so the counter can say how many people are looking right now. It is invented by the server, it is not tied to you or to your device, and its row is deleted after thirty minutes of silence.
• Your IP address, briefly. It is the key the rate limiter counts against, so that one caller cannot flood the site. Those rows are swept an hour after their window closes. It is not used for anything else and it is not joined to anything else.
• Where a click came from. When somebody clicks a brand on the map, the click is counted against that brand and the referring page is recorded. That is what lets an advertiser see the map is sending them people.

There is no analytics product on this site, and no third-party script of any kind.

• To perform the contract. Taking payment, ranking you on the spot you paid for, showing you there and reaching you about it.
• Legitimate interests. Keeping the map fair with rate limits, counting clicks so an advertiser can see the map sends them people, and defending legal claims. You can object, as below.
• Legal obligation. Keeping tax, accounting and complaint records for as long as the law requires.

The map and the leaderboard are public. The address, name, description, colour and logo of a listing, what was paid for it and its position are visible to anyone, including search engines. Do not list a site whose details you do not want shown.

Fetching your page also tells your own server that BrandCity requested it.

• Dodo Payments — takes the payment as merchant of record and holds your card details, which never reach this site.
• Hosting, database and edge infrastructure — currently including Vercel and a managed Postgres provider — so the site can run. Like any host, they keep their own short-lived request logs.
• Google’s favicon service — asked once, by our server, for the logo of a site being put up. Your browser may also ask it directly if our own copy of a logo is missing.
• Cloudflare’s family DNS resolver — asked once, by our server, whether the site being put up is on its adult-content list. It is sent that site’s domain and nothing else: not your address, and nothing about you.

Nobody else. Nothing is sold, and there is no advertising network involved.

The tab counter, thirty minutes. The rate limiter, one hour. A spot and its payments stay for as long as the record of the city does — the leaderboard is ranked by everything ever paid, so removing it would rewrite the history of the place.

Your email address is the one thing that is not part of that record. Ask and it is deleted; your spot and your place on the board stay, with no way to reach you about them.

The Service is for adults. No personal data is knowingly collected from children. If you believe a child has used it, write and it will be deleted.

This policy is updated when the Service or the law changes. The date at the top of the page is the current version.

Write to fernandomonjav@gmail.com from the address on your receipt. You can ask for a copy of what is held about you, for a correction, for it to be deleted, for it to be exported, or to object to processing based on legitimate interests. You may also complain to a supervisory authority where you live.

What cannot be undone is what your own site already published: the name, description and logo shown on the map come from your own tags. Take the spot down and they go with it. See the terms for how a listing comes down.