Privacy
Plain-language privacy.
We collect only what is useful for operating the board, confirming payments, measuring referrals, and limiting abuse.
Information we use
We process public store information submitted to the board, confirmed payment records, aggregate outbound visits, product events, and first-touch referral or UTM data. A payment provider may separately process contact details for receipts, support, fraud prevention, or legal obligations; BrandWar does not publish them or use them to determine rank.
Payments
Checkout is handled by the payment provider shown before payment. BrandWar stores provider references, status, currencies, amounts, and the exchange rate locked for that checkout when conversion is required. When needed to create hosted checkout, the visitor's network address is forwarded to the provider for tax and fraud calculation but is not stored in BrandWar's payment record. We do not collect or store raw card numbers or CVV codes.
Analytics
BrandWar records a small set of first-party product events so we can understand the submission and payment funnel. When configured, PostHog provides product analytics and optional session replay. Replay masks all form inputs, and payment collection happens on the provider's secure checkout rather than on BrandWar.
Cookies and referrals
We use first-party cookies for an anonymous browser identifier and first-touch attribution. Share links may include a public brand identifier and campaign parameters so we can measure whether shared visits lead to submissions or confirmed payments.
Click protection
Outbound visit counts use short deduplication windows and basic bot controls. Where a network identifier is needed for abuse prevention, the application uses a shortened one-way hash rather than publishing or storing the raw address in leaderboard data.
What is never public
Payer emails, network addresses, private provider metadata, payment tokens, authentication data, and administrator notes are not exposed through the public leaderboard or activity data.
For a privacy request, email hello@brandwars.lol.