Privacy at Peak100.

This notice describes the current service. Additional operator disclosures, retention operations and jurisdiction-specific review are still being finalized.

Contact

Peak100 is the service brand and is managed from Türkiye. Privacy enquiries: [email protected]

Accounts and messages

Accounts store your name, email, a password hash if you choose a password, sessions and security settings. Google sign-in is optional. Verification and account-recovery messages are transactional, not a marketing subscription. Support messages, reports and appeals are available to the people handling them, not displayed in rankings.

Google sign-in

If you choose Google sign-in, Google shares your verified email, name and an account identifier with Peak100. We use these to create or authenticate your Peak100 account. We do not request access to your Gmail messages, contacts, Drive files or other Google services. Google access and refresh tokens are not retained, and Google profile images are not loaded or stored. Your email is not published in listings.

What becomes public

Approved listing names, descriptions, destination links, categories and submitted images appear publicly. Rankings and badges show aggregate traffic and the selected period. Do not put private information in a listing or image. Rejected drafts and account email addresses are not part of the public listing.

Visits, cookies and abuse prevention

Request handling uses network addresses, browser request information and the referring source to check eligible visits. Stored traffic events use daily pseudonymous visitor and network keys instead of raw IP addresses or complete referring URLs. Pseudonymous data is not the same as anonymous data. Listing owners see aggregates, not these identifiers.

First-party cookies support sign-in, short-lived visit confirmation and daily duplicate detection. The traffic visitor identity expires at UTC midnight; pending visit confirmation lasts up to five minutes. Account sessions last up to seven days and can be renewed during use. Local proof-of-work may briefly use your device to help limit automated visits. Clearing cookies or blocking scripts can prevent a visit from counting.

Google Analytics and your choice

Public pages use Google Analytics to measure visits and page views. Under the current opt-out setting, measurement starts unless you have rejected it. Choose “Reject analytics” in the notice or open “Analytics settings” in the footer to stop future measurement and clear Analytics cookies. Your preference is remembered in this browser for 180 days. Rejection does not erase data already received by Google. Browser privacy signals (Global Privacy Control or Do Not Track) turn measurement off by default.

Google receives browser/device information, page paths and network information needed to deliver Analytics. Analytics uses first-party cookies (_ga and _ga_*) for up to 180 days. We do not send account names, email addresses, authentication pages, query strings or URL fragments. Advertising features and enhanced automatic interaction measurement are disabled. Data may be processed outside your country. See Google’s Privacy Policy. This opt-out configuration is not a claim of compliance with laws that require prior consent for analytics cookies.

Infrastructure and other websites

Peak100 runs its application, database, email and image storage on its own server infrastructure. Cloudflare provides the existing DNS and web proxy and therefore processes web requests. Google processes an optional Google sign-in when you choose it. Following a listing takes you to an independent website or app store with its own privacy terms.

Retention and requests

Automated cleanup removes eligible pseudonymous traffic events from active stores after 45 days. Unfinished processing or an open traffic report or appeal can delay removal while it is reviewed. Non-identifying daily totals and ranking history may be retained longer. Encrypted backups are separate retained copies; removal from active stores does not mean that a backup or a third-party copy has been erased. Account, support, moderation and legally required retention periods will require further review. We do not promise a deletion deadline that the deployed system has not been verified to meet.

Contact [email protected] about access, correction or deletion. Account export and account deletion requests are available in Account security. Deletion requires a recent sign-in and explicit confirmation. Accepted requests immediately disable the account and remove its listings from public view; background cleanup and any necessary review follow. The private status page distinguishes a pending request from completed removal from active account stores. Administrator accounts and requests needing assistance should use the contact address above. Applicable rights and any required additional operator disclosures remain subject to review for operation from Türkiye; this draft is not a claim of legal compliance.