Public rankings. Private payment details.

Effective August 25, 2026. This is what the site collects and why.

What is collected

When you submit a listing, spotlit.lol stores the submitted URL or handle, public product or profile metadata, category, logo source, support total, ranking history, and outbound click count. These details are intended to appear publicly.

Payments

Dodo Payments processes checkout and card information. spotlit.lol does not receive or store full card details. It stores the minimum provider identifiers, amount, currency, payment status, settlement events, and receipt token needed to verify support, prevent duplicate settlement, handle refunds, and operate public receipts.

Visitors and analytics

The site measures page views, visitor sessions, online activity, and outbound listing clicks. DataFast provides public traffic analytics. Vercel may process request and infrastructure logs. A theme preference may be stored in your browser so the site remembers light or dark mode.

Security and abuse prevention

Requests may produce salted or hashed anti-abuse identifiers, rate-limit records, timestamps, and security logs. These are used to reject automated abuse, duplicate submissions, payment fraud, scraping, and attacks. Secrets and full payment data are not placed in public analytics.

How data is used

Data is used to operate the leaderboard, verify payments, calculate ranks, display and share purchase receipts, count clicks, provide analytics, respond to support, secure the service, and meet legal or accounting obligations.

Who receives data

Public listing and receipt details can be seen by anyone. Service data may be processed by Dodo Payments for checkout, Vercel for hosting and network protection, Turso/libSQL for durable storage, and DataFast for analytics. Data may also be disclosed when required by law or necessary to protect users and the service.

Retention

Public listings and verified ranking history may remain while the board operates. Payment, refund, fraud-prevention, rate-limit, and security records are retained only as long as reasonably needed for operations, disputes, accounting, security, and legal obligations. Backups may take additional time to expire.

Your choices and rights

You can block optional analytics using browser or network controls, though core security and payment verification still operate. Depending on where you live, you may request access, correction, deletion, restriction, or objection. Public listing removal requests are reviewed against payment, fraud, legal, and recordkeeping needs.

Children

spotlit.lol is not intended for children. Do not submit a listing or make a payment if you are under 18.

Changes and contact

This policy may change as the service or its providers change. The effective date will be updated here. Send privacy questions or rights requests privately to @sukipro1v on X; do not post payment identifiers or personal information publicly.

Public purchase cards never include an email address, billing details, checkout ID, or payment ID.