Legal
Privacy
Effective 24 August 2026Version 2026-08-24
Information we collect
- Account data: name, email, auth factors (password hash, optional two-factor secrets, optional passkeys).
- Play records: handles, tickets, click-pack purchases, click totals, and hashed IPs used for the flood cap.
- Public handle copy you publish: name, URL, logo, blurb, and category.
- Ad reservations: creative, buyer account, and payment identifiers needed to fulfill a labeled homepage slot.
- Usage data: the llc_vid visitor cookie, appearance and sidebar preferences, and ordinary request logs used to run the site.
- Billing data: Stripe checkout and payment identifiers. Stripe processes the card. We do not store full card numbers.
How we use information
- Operate accounts, the live board, wallets, and labeled ads.
- Count clicks, enforce the ten-second flood cap, and show rank.
- Process ticket, click-pack, and ad payments through Stripe.
- Send transactional mail such as verification, password reset, and receipts.
- Secure the service and meet legal obligations.
Little Loud Clicks does not run an AI assistant and does not send play data to an AI provider.
How we protect your data
- Encryption in transit using HTTPS/TLS.
- Password hashing and optional two-factor authentication.
- Hashed IPs for the click flood cap instead of storing raw addresses on click events.
More detail sits on the security page.
Public board
Handles you enter in a race appear on the public board with their name, link, category, click totals, and rank. Settled races stay in the Hall of Fame. Treat that copy as public.
Ads
We run labeled display ads on the home board. Those slots are sold placements. We keep the reservation record for a slot (creative, buyer account, and payment) so we can fulfill it. We do not measure those ads with a third-party ad network.
Sharing
We share data with the processors needed to run the product. We do not sell a mailing list. We do not sell or share personal data for cross-context behavioral advertising.
Subprocessors:
- Laravel Cloud (hosting and monitoring)
- Cloudflare (email delivery)
- Stripe (payments)
Cookies
- Session and CSRF cookies to keep you signed in and to protect forms.
- llc_vid to count distinct visitors.
- appearance and sidebar_state to remember display preferences.
Legal bases (EEA/UK)
- Contract: to provide the account, board, and purchases you request.
- Legitimate interests: to secure, maintain, and operate Little Loud Clicks.
- Legal obligations: to comply with applicable law.
International transfers
We may process personal data in the United States and in other countries where our processors operate. Where required, we use appropriate safeguards such as standard contractual clauses.
Data retention
We keep account and play records while the account is active. You can delete your account from settings. That removes the account and the handles, tickets, click-pack balances, and race entries attached to it. We may keep billing identifiers and security logs longer when law, billing, or abuse prevention requires it. Stripe keeps its own payment records.
Your privacy rights (EEA/UK)
- Access, correct, or delete your personal data.
- Object to or restrict certain processing.
- Request data portability.
- Complain to your local data protection authority.
US state privacy rights (CCPA/CPRA)
- Know the categories and specific pieces of data we hold.
- Access, correct, or delete your personal data.
- Opt out of the sale or sharing of personal data (we do not sell or share it).
- Non-discrimination for exercising your rights.
To submit a request, email [email protected]. We will verify the request. An authorized agent may submit a request with proof of authorization.
Do Not Sell or Share
Little Loud Clicks does not sell or share personal data as those words are used in the CCPA/CPRA.
Your choices
- Update your name and email in profile settings.
- Delete your account from settings.
- Email privacy requests to the address below.
Children
Little Loud Clicks is for people 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided personal data, write to us and we will delete it.
Changes
We may update this notice. The current version stays on this page.
Contact
Email [email protected] or write to Modoterra Corporation, 131 Continental Dr Suite 305, Newark, DE 19713 US.