Privacy Policy
Effective date: 11 November 2026 · Applies to topwebsites.store at topwebsites.store
topwebsites.store (“we”, “us”) is a website that shows popular and rising websites by country and region, AI company rankings and recently launched startups. This policy explains what personal information we collect, why, and the choices you have. You can browse every public board without an account.
1. Information we collect
When you sign in with Google or GitHub, we receive and store the following from your account, only after you approve the provider's consent screen:
| Data | Source | Why we use it |
|---|---|---|
| Name | Google or GitHub profile | To show who is signed in and to let the admin review your request |
| Email address (verified) | Google or GitHub | To identify your account, let the admin review it, and contact you about your account if needed |
| Profile picture URL | Google or GitHub profile | To display your avatar in the site's menu and the admin dashboard |
| Sign-in provider and provider account ID | Google or GitHub | To recognise you the next time you sign in |
| Account status, request date, approval date, last sign-in time | Generated by topwebsites.store | To run the admin approval process and keep the account secure |
| Watchlist (countries you save) | You | To show the countries you follow (approved accounts only) |
We request only the basic scopes needed for sign-in: openid, email and profile from Google, and read:user and user:email from GitHub. We do not access your contacts, files, repositories, emails or any other data in those accounts, and we do not post anything on your behalf. Provider access tokens are used once during sign-in to read your profile and are not stored.
When you browse the site, we don't use advertising or analytics trackers. Our hosting provider, Cloudflare, processes standard technical data (such as IP address, browser user agent and request logs) to deliver and protect the service. Your light/dark theme choice is saved in your browser's local storage and never sent to us.
2. Cookies
- Session cookie (
__Host-tsr_session): a signed, HttpOnly, Secure cookie that keeps you signed in for up to 30 days. It contains only an internal account ID and an expiry time. - Sign-in cookie (
__Host-tsr_oauth): a short-lived (10 minutes) signed cookie that protects the Google/GitHub sign-in against forgery.
These cookies are strictly necessary for signing in. We don't use cookies for advertising or tracking.
3. Account approval
New accounts start as pending. The site administrator reviews requests in a private admin dashboard and approves or rejects them. The administrator can see the name, email, avatar, sign-in provider and dates listed above.
4. How we share information
We do not sell, rent or trade your personal information, and we don't share it with advertisers. We share data only with:
- Cloudflare, Inc., which hosts the website (Cloudflare Workers) and stores account data in its D1 database service on our behalf.
- Google or GitHub, only to the extent needed to sign you in, under their own privacy policies.
- Authorities, if required by law.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Retention and deletion
We keep your account information for as long as your account exists. You can ask us to delete your account and all associated data at any time by emailing 23kelly3@gmail.com; we'll do so within 30 days. You can also revoke topwebsites.store's access from your Google account permissions or GitHub authorized apps settings. Signing out deletes the session cookie from your browser.
6. Security
All traffic is encrypted with HTTPS. Sessions are signed with a secret key held only by the server, account status is checked on every request, and admin features are restricted to designated admin accounts. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to its processing. To exercise any of these rights, contact us at the email below.
8. Children
topwebsites.store is not directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their personal information.
9. Changes
We may update this policy. We'll change the effective date above, and for significant changes we'll show a notice on the site.
10. Contact
Questions or requests: 23kelly3@gmail.com