Skip to content

Privacy Policy

Last updated 10 October 2026.

TopCrown has no accounts and collects as little as it can. This page explains what we keep, why, who else sees it and for how long.

Who is responsible

TopCrown runs this site and decides how the data described here is used. Questions and requests go to contact@topcrown.in.

What we collect

  • Listings and payments. The link or handle you submit (as you typed it), its category, the amount, the payment status and time, the payment provider's order and payment IDs, the type of payment method (for example card or UPI), and the version of the Terms you accepted and when.
  • A random visitor ID. A cookie holding a random code, not linked to your name or any account. See Cookies below.
  • A hashed IP address. Your IP address is turned into a keyed, one-way hash as soon as it reaches us, and the key changes every 30 days. We never store your raw IP address.
  • Clicks. When you open a listing, which listing it was, when, and from which part of the site, with your visitor ID and IP hash, so each visitor counts once per listing per day.
  • Daily visits. Your visitor ID (or IP hash) and the times you were first and last seen each UTC day, for the “online” and “visitors today” counts in the header.
  • Server logs. For each request to our API: the path, the response status and how long it took. No IP address, browser details or form contents.

Your browser's user agent is checked to filter out bots when counting clicks, but it is not stored. We don't collect your name, and we never receive your card, UPI or bank details.

Mobile number and email

The claim form asks for a mobile number and email so the payment provider can send your receipt. What happens to them depends on the provider:

  • Razorpay: your browser passes them straight to Razorpay to pre-fill its checkout. They never reach our servers.
  • Cashfree: Cashfree requires them with the order, so our server passes them to Cashfree when it creates your checkout. We don't store or log them.

Your browser also remembers them on your device to fill the form next time. Leave both fields empty when you pay, or clear this site's data in your browser, to remove them.

Cookies and local storage

  • One cookie (__Host-tc_vid) holds the random visitor ID. It lasts one year, is only sent to our own site, and can't be read by scripts. It is used for rate limits, counting unique clicks and visitors, and limiting how many checkouts can be open at once.
  • Local storage on your device keeps your light or dark theme choice and, if you entered them, your mobile number and email for the claim form. This stays in your browser and is not sent to us.
  • We use no analytics, advertising or tracking cookies. When you pay, Razorpay's or Cashfree's checkout loads in your browser and may set its own cookies under its own policy.

Why we use this data

  • To run the boards: record payments, calculate ranks and show listings.
  • To process payments and handle refunds, disputes and chargebacks with the payment provider.
  • To keep the service fair and working: rate limits, counting each visitor's click once, and stopping abuse.
  • To show anonymous counts such as visitors today and clicks per listing.
  • To meet accounting, tax and other legal obligations.

We don't sell data, show ads or build profiles of visitors.

Public listings

Everything about a listing is public: its link, title, description, logo or avatar, category, totals, ranks, click count, and the amount and time of each payment in the activity feed. Payers are never named. Some listings are X or Instagram profiles of real people. If a listing is about you and you object, email contact@topcrown.in.

Who we share data with

  • Payment providers (Razorpay or Cashfree) receive the payment amount, the order reference and the listing it is for, plus your mobile number and email as described above.
  • Cloudflare sits in front of the site for security and delivery, so it handles your IP address and requests as they pass through.
  • Our hosting provider (Hostinger) runs the servers and database where this data is kept.
  • Lookups about listed sites. To show previews, logos and avatars, our server fetches the listed page itself and may ask Google's and DuckDuckGo's icon services or unavatar.io about the site or handle. This can happen while you type a link into the claim box, before you submit it. These requests come from our server and include only the site address or handle, nothing about you.
  • Listed sites you open from TopCrown see utm_source=topcrown in the address, so they know the visit came from us. Nothing about you is added, and your browser is told not to send them the TopCrown page you came from.
  • Authorities, when the law requires us to.

How long we keep it

  • Rate-limit counters: about an hour.
  • Cached page previews: about a day.
  • Daily visit records: 30 days.
  • Individual click records: 90 days. After that only daily totals per listing remain.
  • Payment records, including the visitor ID and IP hash stored with them: kept, because listing totals are built from them and we need them for accounting, tax and disputes.
  • Listings: public until removed.
  • The visitor cookie expires one year after it was set. Local storage stays until you clear it.

Your rights

You can ask to see, correct or delete data about you, or object to how we use it, by emailing contact@topcrown.in. As there are no accounts, tell us what we should look for: a listing's link, a payment reference or the provider's receipt. We may keep payment records where the law or accounting rules require it. If you aren't satisfied with our answer, you can complain to the relevant data protection authority.

Children

TopCrown is not meant for children. You must be at least 18 to pay, and we don't knowingly collect data about anyone younger.

Changes

We'll update this policy when what we collect or how we use it changes, and the date at the top shows the latest version. See also the Terms of Service and the Rules.