Privacy policy

This explains what we collect, why, and what you can do about it. It is written to meet our obligations under India’s Digital Personal Data Protection Act, 2023.

What we collect

• Your email address, given when you post. Used to send your receipt, to tell you when someone moves above you, and to let you sign in later and manage your posts. It is never shown on the board.
• What you post — the message, the name you chose, an optional description, link and image. This is public by design.
• Payment records — amounts, times and the payment provider’s reference. We never see or store your card details; those go directly to the payment provider.
• Basic technical data — IP address and request logs, used to apply rate limits and investigate abuse.

What we do not do

• We do not sell your data.
• We do not run advertising trackers or share your data with ad networks.
• We do not display your email address anywhere public.

Cookies and similar storage

We set one cookie, and only after you sign in: a session cookie that keeps you signed in so you can manage your posts. It is strictly necessary for that function and cannot be turned off while you are signed in. Signing out removes it.

We use no advertising, analytics or tracking cookies, and no third-party trackers or pixels. Nothing follows you to other websites.

Why we are allowed to hold it

Your email and payment records are needed to provide the service you paid for and to meet tax and accounting obligations. Everything else is held on the basis of the consent you give when you post.

How long we keep it

• Posts stay on the board until removed.
• Payment records are kept as long as tax law requires, currently eight years, even if you delete your account.
• Request logs are kept for 90 days.

Your rights

You can ask us to:

• Show you the personal data we hold about you.
• Correct anything inaccurate.
• Delete your account. Your email is removed and your posts are anonymised. Financial records are retained as tax law requires, and posts already paid for stay on the board.
• Export your data in a machine-readable form.

Ask through Contact. We respond within 30 days.

Who else processes it

We use a small number of service providers, each for one function only. They act on our instructions and may not use your data for their own purposes.

• Payment gateway — takes your payment and tells us whether it succeeded. Your card, UPI and bank credentials are entered on the gateway’s systems and never reach ours. It receives your email address so it can issue its own receipt and handle refunds and chargebacks.
• Hosting and database — runs the website and stores posts, email addresses and payment records.
• File storage — stores the icon or image attached to a post. Public by design, since it appears on the board.
• Email delivery — sends your sign-in codes and receipts. It handles your email address and the contents of those messages.

Some of these providers operate outside India, so your data may be processed abroad. We use providers that offer contractual data-protection terms, and we do not transfer data to any country India has restricted.

We disclose data to law-enforcement or other authorities only where legally required, and to a bank or gateway where needed to defend a chargeback you raised.

Data breaches

If a breach affects your personal data we will notify you and the Data Protection Board of India as the DPDP Act requires.

Security

Data is encrypted in transit. Sign-in codes are stored hashed and expire in ten minutes. Email addresses are stored separately from the public post record so that publishing a post cannot expose the address behind it.

Children

This service is not intended for anyone under 18, and we do not knowingly collect data from children.

Complaints about your data

If you are unhappy with how we have handled your data, our Grievance Officer can be reached at contact@worldnumber1.com — see Grievance redressal.

Changes

If this policy changes materially we will say so on the site. The date at the top always reflects the current version.