Privacy Policy

1. Scope and controller information

This Privacy Policy applies to overtaken.xyz and the Overtaken leaderboard. For privacy requests or questions, contact justusvanm@gmail.com.

2. Information Overtaken processes

When you submit a creator entry, Overtaken processes the display name and one or more submitted social profiles. Supported profiles are Instagram, TikTok, X / Twitter, YouTube, Twitch, and LinkedIn. Overtaken stores normalized handles and canonical profile links for valid submitted profiles. Overtaken may make a best-effort request for public profile metadata to store a profile-picture URL from the submitted platform.

For checkout and leaderboard operation, Overtaken processes or creates the selected bid amount, payment status, checkout and payment identifiers, timestamps, and an internal bid ID. Overtaken may also process request and error information, including IP address and browser, device, or network information when those details are generated in infrastructure or security logs.

3. Payment data and Dodo Payments

Dodo Payments provides checkout, payment, Merchant-of-Record, transaction-confirmation, and related tax, fraud, and compliance services. Overtaken does not intentionally receive or store full payment-card numbers. Dodo may independently process payment, billing, tax, fraud-prevention, regulatory, and related information as an independent controller for relevant transaction processing. Review Dodo's privacy information when using checkout at dodopayments.com.

4. Public leaderboard information

Overtaken's core purpose requires publishing creator information. After a successful payment is confirmed, your display name, handles, canonical social-profile links, best-effort public profile picture where available, amount paid or bid, and leaderboard position may be publicly visible on the Global and Today leaderboards.

Public leaderboard information can be viewed by anyone and followed through links to third-party platforms. It can also be cached, indexed, screenshotted, or copied by third parties outside Overtaken's control. Do not submit information that you do not want publicly associated with the relevant leaderboard entry.

5. How Overtaken uses information

• Operate the Global and Today leaderboards and process creator submissions.
• Validate bids, create payment checkouts, and confirm successful payments.
• Prevent duplicate or fraudulent transactions and protect service integrity.
• Display public leaderboard entries and enforce the Terms & Conditions.
• Maintain security, troubleshoot errors, and comply with legal obligations.
• Respond to support and privacy requests.

6. Legal bases for processing

Where the GDPR applies, Overtaken processes information needed to provide paid leaderboard placement on the basis of contract performance. Overtaken may process information for legitimate interests in security, fraud prevention, service integrity, troubleshooting, and protecting Overtaken and its users. Overtaken may also process information to comply with legal obligations. Overtaken relies on consent only where it is genuinely required or used, such as optional marketing or non-essential cookies if introduced. Agreeing to this Privacy Policy is not consent to unrelated processing.

7. Providers and third parties

Overtaken uses Cloudflare for website and Worker infrastructure, D1 database services, networking, and security. It uses Dodo Payments for checkout, payments, Merchant-of-Record services, payment confirmation, and related transaction processing.

Leaderboard links may take visitors to Instagram, TikTok, X, YouTube, Twitch, or LinkedIn. Those sites operate under their own privacy policies. Overtaken does not send visitors' information to those platforms merely by listing a link; a visitor's click takes them to the selected third-party site.

8. Cookies and tracking

Overtaken does not intentionally use non-essential advertising or analytics cookies, behavioural tracking, advertising pixels, or marketing cookies at present. Infrastructure and security providers may use strictly necessary technical mechanisms where applicable to provide, protect, or maintain the site. If Overtaken introduces non-essential cookies or tracking, this policy will be updated and any required choices will be provided.

9. Retention

Public leaderboard information may remain for as long as reasonably required to operate historical and Global leaderboard functionality, subject to legitimate removal or privacy requests and applicable law.

Pending or failed transaction information is retained only as reasonably needed for payment reconciliation, fraud prevention, troubleshooting, and legal obligations. Successful transaction records may need to be retained longer for accounting, disputes, fraud, compliance, and legal obligations. Server and security logs are retained only as reasonably necessary for operational and security purposes.

10. Your privacy rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information. You may withdraw consent where processing relies on consent and complain to a competent supervisory authority. Some information may need to be retained despite a deletion request where necessary for legal obligations, accounting, fraud prevention, or dispute handling. To exercise a right, email justusvanm@gmail.com.

11. Removing public profile information

You may contact justusvanm@gmail.com to request correction or removal of personal information displayed on Overtaken. Removal from public display does not necessarily require deletion of transaction, accounting, or compliance records. Information independently copied, cached, or indexed by third parties can remain outside Overtaken's control. Removing an entry does not automatically result in a refund.

12. International transfers

Cloudflare, Dodo Payments, and other service providers may process information in multiple countries. Where applicable, providers may use appropriate safeguards for international data transfers. Overtaken does not make a representation in this policy about a particular transfer mechanism unless it has been confirmed for the relevant processing.

13. Security

Overtaken uses reasonable safeguards designed for its service, including server-side payment secrets, signed payment-webhook verification, Cloudflare infrastructure, server-side validation, canonical profile URL validation, and storage of limited payment metadata rather than full card data. No method of transmission or storage is completely secure, and Overtaken cannot guarantee absolute security.

14. Children

Overtaken is not intended for children. Purchases and creator submissions are limited as described in the Terms & Conditions. Overtaken does not knowingly solicit personal information from children.

15. Changes to this Privacy Policy

Overtaken may update this policy to reflect changes in its processing or legal obligations. Material updates will be reflected by changing the Last updated date above.

16. Contact

For privacy questions or requests, email justusvanm@gmail.com.