Privacy Policy

Who is responsible

The controller is Real Millionaire. For privacy questions, use our contact form.

Visiting the website

You can read the site without creating an account. We do not use advertising trackers or marketing cookies. Our hosting and infrastructure providers process technical data such as IP address, browser type and request times in server and security logs, to deliver the site and protect it against abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). These logs are kept only briefly by the providers for operational and security purposes.

Anonymous analytics (PostHog)

To understand how the site is used, we use PostHog web analytics, hosted in the EU (PostHog EU Cloud). It records anonymous page views, sessions and a few clicks: opening the full ranking or news archive, opening the methodology page, clicking a news article (the headline, publisher and destination website only), clicking a Wikipedia link, using the ranking search (only that it was used, never what you typed) and successfully submitting the contact form (never its contents). We do not identify you, create profiles, record your screen (no session replay), build heatmaps, or capture names, email addresses or anything typed into forms. Search terms are removed from recorded page addresses. No cookies or browser storage are used, so a session ends when you close or reload the tab. The admin area is never tracked. Legal basis: legitimate interest in improving the site (Art. 6(1)(f) GDPR).

Contact form

• Data: your name, email address, subject and message, plus a one-way hashed form of your IP address used only for rate limiting.
• Bot protection: the form uses Cloudflare Turnstile. When you open the contact page, Cloudflare processes technical signals from your browser (such as IP address and browser characteristics) to tell humans from bots; our server then checks the result with Cloudflare before accepting the message. Legal basis: legitimate interest in preventing abuse (Art. 6(1)(f)). See Cloudflare’s Turnstile privacy addendum.
• Email: your message is emailed to us and you receive a confirmation email, sent through our email delivery provider.
• Purpose: reading and answering your message, and preventing spam.
• Legal basis: legitimate interest in responding to inquiries (Art. 6(1)(f)), or steps at your request (Art. 6(1)(b)).
• Retention: messages are stored in our secured database, accessible only to site administrators, and deleted once they are handled and no longer needed — at most 12 months.

Admin sign-in

Only site administrators can sign in. For them we process an email address, authentication records (sign-in tokens, timestamps) and an audit log of administrative actions, for the purpose of securing the admin area. Legal basis: legitimate interest. Data is kept for as long as the admin account exists.

Public figures

Our rankings show publicly available information about prominent individuals (name, estimated net worth, companies, public Wikipedia links and openly licensed portraits), processed for journalistic and informational purposes.

Service providers

• Lovable / Lovable Cloud — website hosting, database and authentication (infrastructure may be located outside the EU, protected by standard contractual clauses).
• Email delivery provider — for magic-link sign-in emails to administrators and contact-form emails.
• Cloudflare — Turnstile bot protection on the contact form.
• PostHog (EU Cloud) — anonymous, cookieless website analytics.

Our data sources (BLS, RapidAPI, Wikidata, Wikimedia Commons, Google News) are called from our servers; your browser does not send them your data. Portraits are loaded from Wikimedia servers, which receive your IP address when displaying an image. External links you click lead to sites with their own privacy policies.

Your rights

You have the right to access, rectify or erase your data, restrict or object to processing, and data portability. Use our contact form to exercise them. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

See our Cookie / Tracking Policy.