Privacy

King of What has no accounts. It never asks for your name, your email or your payment details, and it has nowhere to put them if you offered. What follows is the whole of what it keeps.

On the website

A visitor id

Your first request is answered with a cookie called pantheon_vid holding a random identifier. It is not derived from anything about you — it is a fresh random value, and it means nothing outside this site. It is set httpOnly, so scripts on the page cannot read it, and it lasts a year.

It exists for one reason: the rule that you may honour each contender once. Without something to recognise you by, that rule cannot be kept and the standings would mean nothing. The same id is what lets the board show you which contenders you have already honoured.

Clear it and you are a new visitor: your past honours are no longer attributed to you, and you can honour the same contenders again. Nothing else on the site changes.

Honours

Each honour is stored as three things — which contender, which visitor id, and when. Nothing about the request beyond that is written down.

What you type and upload

Rooms and contenders are public by design: their titles, names and images are shown to everyone who opens the board. Do not put anything in them you would not publish, and do not upload an image you have no right to use.

Addresses

Requests are rate limited so that one visitor cannot flood a board. That check needs to tell callers apart, so your IP address is hashed and only the hash is used. The raw address is never written to disk and never logged, and the hashes are held in memory only — they are gone when the server restarts.

Analytics

The live site loads Yandex Metrica, which counts visits and page views. It sets its own cookies and receives your IP address and browser details, under Yandex's privacy policy. It is not loaded during local development. Blocking it with an extension does not affect the site.

From Reddit

King of What also runs as a Reddit app. When a board is opened inside a Reddit post, Reddit tells the app which account is looking at it, and honours cast there are stored against that account id — the opaque t2_… form, never your username, and never anything else from your Reddit profile. It is used exactly as the website's visitor id is: to keep one honour to each contender, and to show you what you have already honoured.

Boards that live on Reddit are held by Reddit, on Reddit's infrastructure, and are covered by Reddit's privacy policy as well as this one.

Who else sees it

Nobody. Nothing here is sold, rented or handed to advertisers or data brokers, and there is no third party involved beyond the analytics named above and the hosting the site runs on. Should a lawful order ever demand otherwise, note how little there is to hand over.

How long it is kept

Rooms, contenders and honours are kept for as long as the board exists. Hashed addresses live only in memory. Your cookie expires a year after it is issued, or the moment you clear it.

Removing something

To have a room, a contender or an image taken down, write to rasul.sahibjanli@gmail.com. Because there are no accounts, there is no identity to verify and no archive of your activity to send you — say which board and which entry, and it will be dealt with.

Changes

If what the site stores changes, this page changes with it and the date at the top moves. There is no mailing list to notify, which is rather the point.