Who controls the data
Socials.win is operated by Carsss. Privacy and rights requests can be sent to [email protected]. This policy covers https://socials.win and its service subdomains.
Data we handle
We process public creator profile information such as names, handles, profile URLs, avatars and descriptions. We also process service requests, security logs, IP-derived signals, browser information, support messages, reports and claim-verification data.
- Payment and order status is received from Dodo Payments, or from Polar when that configured fallback is selected; complete card data stays with the payment providers.
- FingerprintJS provides an additional browser signal for public click deduplication, but it is not our only visitor identity source.
- Public click totals come from Socials.win backend records, not from GA4 or DataFast.
Why we use it
We use data to operate the leaderboard, confirm boosts, route external clicks, prevent abuse, verify claims, handle reports, secure the service, provide support, measure product performance and comply with legal obligations.
Depending on the context, processing relies on contract performance, legitimate interests, consent or legal obligations.
Providers and transfers
We use service providers including Dodo Payments for payments, and Polar when its configured fallback is selected, plus Hetzner-compatible object storage, Cloudflare for edge delivery and security, DataFast for product analytics, Google Analytics through gtag for aggregate traffic measurement, and infrastructure providers needed to run the service.
Providers may process data outside your country using the safeguards required by applicable law. We do not sell creator payouts or personal-data access.
Retention and security
We retain data only as long as needed for the purposes above. Financial and audit records may be kept for legal, tax, dispute and reconciliation periods; security logs and raw analytics events use shorter operational windows where practical.
We apply access controls, encryption in transit, backups, network restrictions and secret separation. No internet service can guarantee absolute security.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, withdraw consent, and complain to a data-protection authority. A public creator may also use the verified claim and delist processes.
Send a specific request and the relevant Socials.win profile URL to [email protected]. We may need proportionate verification before acting. Analytics starts when the public site loads. Acknowledging the analytics notice only hides the notice and does not control collection.