Privacy Policy
This policy explains how WhoPushedThis handles personal information, including where GDPR or South Africa's POPIA applies.
Information we collect
Listing, claim and correction forms collect the information you submit, including contact email addresses. For abuse prevention, the application stores a keyed fingerprint rather than adding a raw IP address to listing or correction records. Hosting and CDN logs may still contain network data.
Security checks
Protected forms use Cloudflare Turnstile where supported. If Turnstile cannot load or complete, a Compatinova compatibility check is used instead. The fallback uses short-lived, one-time server-side challenges and does not replace Turnstile when Turnstile is working normally.
Cookies and local storage
Necessary session cookies support CSRF protection, fraud and abuse prevention, secure forms and payment-related sessions. They are used to operate and secure the service. We store your privacy preference in this browser’s local storage (not in a tracking cookie) for up to 180 days, after which we ask again. The public visitor counter shows an aggregate number. Its 30-minute first-party visit-window cookie is set only when you opt in to optional analytics; without that permission, the counter can still display previously recorded totals but your visit is not added through the optional counter. No third-party analytics tools are installed. The preference panel lets you permit or refuse optional analytics; that choice does not introduce new analytics tools. You can review or withdraw that permission at any time using the “Cookie settings” control in the footer. Necessary security and session storage cannot be disabled from this panel. Cloudflare Turnstile may be used for abuse prevention on protected forms; see Security checks above. You can also manage or clear cookies and local storage through your browser settings.
Payments
Featured-slot and intelligence-submission checkout are handled by Dodo Payments. Payment card details are entered with the payment provider, not WhoPushedThis. We keep order identifiers, status, amount/currency metadata and listing references needed to reconcile the placement.
Why we use information
We use information to operate and secure the directory, review submissions, claims and corrections, deliver purchased placement or intelligence processing, inspect publicly supplied product-source URLs, record aggregate outbound referrals, prevent abuse and meet legal obligations.
Public source inspections and referrals
We periodically request vendor-supplied public pages, recording URL, reachability and content fingerprints. Public referral redirects may be counted without storing a visitor identity in the referral table. Hosting or CDN request logs may retain conventional network details.
Retention
Records are kept only as long as reasonably needed for directory operations, accounting, dispute handling, fraud prevention and legal obligations. Webhook identifiers are retained to prevent duplicate payment processing.
Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to or receive a copy of your personal information. Some records may need to be retained where legally required.
International processing
Hosting, security and payment providers may process information outside your country. Appropriate safeguards should be configured with those providers for production use.
Contact
Privacy requests can be sent through Support or emailed to support@whopushedthis.com.