Privacy
Data Handling & Security Directive // Last Updated: March 2026
THE TPP PROTOCOL believes in minimal data extraction. We do not sell your data, we do not track you across the web, and we do not serve third-party advertisements. This document outlines exactly what we collect and why.
1. Information We Collect
To maintain the operational integrity of the leaderboard and prevent spam, we collect the following essential data upon account creation:
- Username: Displayed publicly on your submissions and comments.
- Email Address: Used strictly for account verification, password resets, and critical run moderation updates.
- Password: Cryptographically hashed using bcrypt. We cannot see your password.
- Platform Data: The URLs, timestamps, and metadata you actively submit to the database.
2. Strict Cookie Policy
Unlike modern web platforms, we do not employ behavioral tracking. Our system uses exactly one (1) functional cookie.
This is an HTTP-Only JSON Web Token (JWT) required solely to authenticate your session and authorize database write-access. Because this is strictly necessary for the site to function, and because we deploy zero marketing cookies, we are exempt from requiring an intrusive "Cookie Consent" banner.
3. Third-Party Subprocessors
We do not share, sell, or rent your data. We rely on two secure infrastructure partners to keep the platform online:
- Railway: Secures and hosts our core PostgreSQL database.
- Resend: Dispatches transactional emails (e.g., password resets). Your email is processed securely through their API.
4. Your Rights (GDPR & CCPA)
You own your data. You have the absolute right to:
- Request a full export of your telemetry data.
- Request the correction of inaccurate data.
- The Right to Erasure: Request the permanent deletion of your account, submissions, and communications from our database.
To execute any of these rights, initiate a request by contacting the system administrator at support@ttpprotocol.com.
5. Policy Modifications & Future Monetization
As this platform evolves, our data collection practices may change (for example, if we introduce third-party advertisements to support server costs). We reserve the right to update this Privacy Protocol at any time.
If our cookie policy changes to include tracking or marketing cookies, we will immediately implement a GDPR-compliant consent banner. Continued use of the platform after updates indicates your acknowledgment of the new data practices.