Privacy policy

Last updated 2026-10-23

Who we are

1st1k (1st1k.com) is run by Devrim Vardar, who is the controller of the personal data described here. Contact: the contact details on devrimvardar.com.

What we collect, and why

• Visits and clicks. When you open a page or click a listing we store the time, the page, your browser's user-agent, the referring site, a random visitor ID and a salted hash of your IP address (never the IP itself). We use this to count clicks, to tell human visitors from bots, and to show the public statistics.
• Bot detection signals. Whether JavaScript ran, whether real user interaction happened, and whether the browser identifies itself as automated.
• Country. After your first real interaction we look up the country of your IP address with the geolocation service ip-api.com. The result is stored against the hash of your IP, so the same address is not looked up again. The IP address is sent to that service for the lookup and is not stored by us.
• Your account. If you log in to add a link we receive your email address, name and profile picture from Firebase Authentication (Google). We store them to run your account and your listings.
• Your listings. The address, title, description, language, country and tags you submit are shown publicly. We also fetch the preview image and favicon from your site and keep a resized copy.
• Reports. If you report a listing we store the reason, the time, your visitor ID and the IP hash.

Cookies and local storage

• Visitor cookie (v, one year): a random ID so that one visitor counts once per listing. Strictly needed for the click count.
• Session cookie (s1k, 30 days): keeps you logged in. Only set when you log in.
• Local storage: remembers your cookie choice and the last listing you visited so we can offer the report option when you return.
• Google Analytics (cookies from Google): only loaded if you accept. Change your choice.

Who else sees data

• Google / Firebase (login, and Analytics if you accept).
• ip-api.com (country lookup, see above).
• Our payment provider, when paid listings are used. We do not receive or store card details.
• Our hosting provider stores everything on our behalf.

How long we keep it

Visit and click records are kept as long as the statistics need them; we have not set an automatic deletion schedule yet. Account and listing data is kept while the listing or account exists. You can ask us to delete your account and listings at any time.

Your rights

You can ask for access to your data, correction, deletion, restriction, or a copy of it, and you can object to processing. Contact us at the address above. You can also complain to your data protection authority (in Finland, the Data Protection Ombudsman).

Changes

If we change this policy we update the date at the top.