Privacy Policy

This policy explains what personal data RankForged collects, why, who sees it and what your choices are. RankForged is operated by ExitStack LLC. We keep it short and we only describe what the service really does.

1. Who we are

The operator is ExitStack LLC, a Wyoming limited liability company (Wyoming Secretary of State ID 2025-001834954), 30 N Gould St Ste R, Sheridan, WY 82801, United States. ExitStack LLC is the controller of your personal data. Contact: hello@rankforged.com.

2. What we collect

• Account data: your name, e-mail address and a password (stored only as a hash). If you sign in with Google, we receive your name, e-mail address and Google account ID.
• Your use of the service: the keywords, ASINs and phrases you search, the results, your exports, and how many searches you have run today (to apply your plan limits).
• Plan and payment status: which plan you have and whether it is active. Card details are collected by our payment provider, not by us (see section 5).
• Messages to us: what you send through the contact form or by e-mail, with your name and e-mail address.
• Technical data: your IP address, browser type and the pages you request, recorded in our server logs for security and fault-finding.

3. How we use it, and why

• To provide the service you asked for: your account, searches, plan limits and exports (contract).
• To take and manage payments, and to keep the records the law requires (contract and legal obligation).
• To answer your messages and send e-mails that are part of the service, such as sign-in, e-mail confirmation, password reset and receipts (contract and legitimate interests).
• To keep the service secure, prevent abuse and fix faults (legitimate interests).

We do not sell your personal data. We do not share it for advertising, and we do not use it to build advertising profiles.

4. Cookies and similar technology

We use only the cookies the site needs to work: a session cookie that keeps you signed in and a security (CSRF) cookie that protects your forms. We do not load analytics, tracking or advertising cookies or scripts. Because we use only these essential cookies, we do not show a cookie consent banner. Our pages load one typeface from Bunny Fonts (fonts.bunny.net); when your browser fetches it, Bunny can see your IP address.

5. Who else handles your data

• Dodo Payments processes payments for paid plans, collects your card and billing details under its own privacy policy, and e-mails you the invoice for each payment. We receive your plan, subscription status and a customer reference, never your card number.
• Google, only if you choose "Continue with Google".
• Resend sends our e-mails (it handles your e-mail address and the content of the message).
• Hetzner provides the servers the service runs on, in Germany and in the United States.
• Amazon: to build results we read public Amazon pages and suggestions using the keywords and ASINs you enter. Your name and e-mail address are not sent to Amazon.

We may also disclose data if the law requires it, or to protect our rights, or if the business is sold, in which case the new owner must honour this policy.

6. How long we keep it

We keep your account data and searches while your account is open. If you delete your account, your profile, saved searches and exports are deleted. We keep payment and tax records for as long as the law requires, and our payment provider keeps its own records. Server logs are kept for 90 days, for security and fault-finding, and then deleted. Messages you send us are kept as long as needed to help you and to keep a record of the conversation.

7. Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to restrict or stop how we use it. You can download your results as CSV files yourself, and you can delete your account in Settings, then Profile. If you are in the European Economic Area or the United Kingdom, you have these rights under the GDPR, including the right to complain to your data protection authority. If you are a California resident, you have the right to know what we collect, to have it deleted or corrected, and not to be discriminated against for using these rights; we do not sell or share personal information for advertising. To use any right, write to hello@rankforged.com from the e-mail address on your account. We answer within one month.

8. International use

ExitStack LLC is in the United States, and our servers are at Hetzner in Germany and the United States, so your data may be processed in both the United States and the European Union. Where the law requires it, we rely on the safeguards our providers offer, such as standard contractual clauses.

9. Children

RankForged is for adults who publish or plan to publish books. It is for people aged 18 or over and is not directed at anyone younger, and we do not knowingly collect their data.

10. Changes

If we change this policy in a way that matters, we will change the date above and, for significant changes, tell account holders by e-mail.

11. Contact

ExitStack LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.
E-mail: hello@rankforged.com