Privacy Policy
Effective September 8, 2026. Last updated September 8, 2026.
This policy explains what personal data richerthanyou.lol (the "Service") collects, why, and what rights you have. It applies to everyone who uses the Service and to everyone who appears on it, including people who never signed up. If you are listed and did not put yourself there, the section "If you are listed and did not list yourself" is written for you.
Who is responsible
The controller is The Dutch Merchant B.V., registered in the Netherlands, Chamber of Commerce (KvK) number 95880844, registered office Passeerdersstraat 1 H, 1016 XB Amsterdam.
Contact for anything in this policy, including removal requests: legal@richerthanyou.lol.
We have not appointed a Data Protection Officer; we are not required to.
What the Service does with personal data, in one paragraph
richerthanyou.lol is a public leaderboard. Handles, payment totals, positions, achievements and historical records are published publicly by design — that is the product. Anyone can create a listing referring to a public social media handle, including a handle belonging to someone else, and pay toward it. When that happens we process the listed person's data without having collected it from them, and this policy tells them what we hold, why, and how to make it stop.
What we collect
From people who create or claim a listing
| Data | Why | Legal basis |
|---|---|---|
| Handle, chosen listing details, optional link | To display the listing, which is the service you bought | Contract (Art. 6(1)(b)) |
| Email address | Ownership and overtake notifications, manage link | Contract (Art. 6(1)(b)) |
| Payment amount, currency, timestamp, processor reference | To calculate position, keep records, and meet accounting obligations | Contract; legal obligation (Art. 6(1)(b), (c)) |
| Claim verification material (the public post you make and the link you send) | To confirm you control the account | Contract (Art. 6(1)(b)) |
| Terms acceptance record: version, timestamp, session reference | To evidence agreement to the Terms | Legitimate interest in being able to prove agreement (Art. 6(1)(f)) |
| Country, derived from the payment or IP | Tax and compliance | Legal obligation (Art. 6(1)(c)) |
We never see or store full payment card numbers. Card data goes directly to the payment processor.
From people who are listed by someone else
| Data | Source | Legal basis |
|---|---|---|
| Public handle | The person who created the listing | Legitimate interest (Art. 6(1)(f)) |
| Public profile image, fetched via a third-party avatar service | The platform the handle belongs to | Legitimate interest (Art. 6(1)(f)) |
| Amounts paid toward the listing, and its board position and history | Our own records | Legitimate interest (Art. 6(1)(f)) |
Our legitimate interest is operating a public board on which any participant can be named, and the interest of users in a board that reflects real public identities. We have weighed that against the interests of listed people and applied these limits: only public handles and public avatars, never private information; no claim that a listed person is rich, wealthy or poor; no listings of anyone under 18; and an unconditional removal route described below. If you object, we remove the listing — we do not weigh it again.
From visitors
| Data | Why | Legal basis |
|---|---|---|
| Server logs: IP address, user agent, request path, timestamp | Security, abuse prevention, debugging | Legitimate interest (Art. 6(1)(f)) |
| Analytics events | Understanding how the Service is used | Consent (Art. 6(1)(a)) |
| Referral attribution cookie | Crediting a referrer for a signup | Consent (Art. 6(1)(a)) |
| Page and profile view counts | Public counters shown on the Service | Legitimate interest (Art. 6(1)(f)) |
Analytics and referral cookies are only set after you accept them in the cookie banner. Declining does not limit your use of the Service.
If you are listed and did not list yourself
You have the right to object to this processing under Article 21 GDPR, and separately to request erasure under Article 17.
In practice, you do not need to cite either. Email legal@richerthanyou.lol from an address or account that reasonably shows you are the listed person, or use the contact route on the listing page, and say you want the listing gone. We will:
- remove or anonymise the listing within a reasonable time, and normally within 7 days;
- stop displaying your handle and avatar;
- not require you to explain why;
- not return any money to whoever paid, which is a matter between us and them and is set out in the Terms.
Where a historical record must be retained (for example a sealed entry in the Hall, or accounting records of a payment), we anonymise it rather than delete it, so the record shows that a position existed without identifying you.
How you find out you are listed. We publish this policy and the Terms, and every listing page carries a removal route. Contacting each listed person individually is not proportionate for a public board of this kind, so we rely on the exception in Article 14(5)(b) and make the information easy to find instead. If you contact us, we will tell you what we hold about you.
Who else sees the data
We use these processors and service providers:
| Who | What for | Where |
|---|---|---|
| Payment processor (merchant of record) | Taking payment, invoicing, tax remittance, disputes | See their privacy notice |
| Database and hosting provider | Storing the data that runs the Service | EU where available |
| Application hosting provider | Serving the Service | Global edge network |
| Email delivery provider | Ownership and notification emails | See their privacy notice |
| Avatar resolution service | Fetching public profile images for listed handles | See their privacy notice |
| Product analytics provider | Usage analytics, only with your consent | See their privacy notice |
Some of these are outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
We do not sell personal data. We do not share it for advertising. We may disclose it where the law requires, or to establish or defend legal claims.
How long we keep it
| Data | Retention |
|---|---|
| Listings and board history | For as long as the Service operates. Anonymised on removal request rather than deleted, where a historical record is needed |
| Payment and accounting records | 7 years, as Dutch tax law requires |
| Terms acceptance records | 7 years, to evidence agreement |
| Email addresses | Until the listing is removed or you unsubscribe |
| Server logs | Short retention, typically weeks |
| Analytics data | As configured with the analytics provider |
Your rights
Under the GDPR you can ask us to:
- give you a copy of the data we hold about you (Art. 15);
- correct it if it is wrong (Art. 16);
- delete it (Art. 17);
- restrict how we use it (Art. 18);
- give it to you in a portable form (Art. 20);
- object to processing based on legitimate interest (Art. 21), which includes every listing created by someone else;
- withdraw consent for cookies at any time, without affecting what happened before.
Email legal@richerthanyou.lol. We respond within one month. We may ask for something that reasonably shows the request is yours, especially where it concerns a listing.
If you are not satisfied, you may complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority where you live.
Children
The Service is not for anyone under 18. Listing a person under 18 is prohibited, whether by themselves or anyone else. If we learn a listing refers to a minor, we remove it immediately and delete the associated personal data. If you believe a listing refers to a minor, email legal@richerthanyou.lol and we will treat it as urgent.
Automated decision-making
We do not carry out automated decision-making with legal or similarly significant effects. Board positions are calculated from amounts paid; that is arithmetic, not profiling.
Security
Data is held with reputable providers, access is limited to what running the Service requires, and payment card data never reaches us. No service is perfectly secure, and we do not claim otherwise.
Changes
If we change this policy we update the date at the top. Material changes will be flagged on the Service.
Questions: legal@richerthanyou.lol.