Privacy Policy
Last updated · August 25, 2026
BanterMap (“we”, “us”) respects your privacy. This policy explains what we collect, why we collect it, and how you can control it. We aim to comply with GDPR (EEA/UK), CCPA (California), and KVKK (Türkiye).
1. Data we collect
Content you submit
- Your public handle (e.g.
@username). - Your public banter message and image (if uploaded).
- Your optional promo URL.
All of the above is visible to any visitor of BanterMap.
Payment data
- Handled entirely by Lemon Squeezy Inc., our merchant of record. We never see or store full card numbers.
- We store the Lemon Squeezy order ID linked to your conquest for fraud prevention, refund handling and receipts.
Technical data (automated)
- IP address — used only to apply rate limits and prevent abuse. Retained for up to 24 hours in memory, not stored long term.
- Cloudflare Turnstile tokens — issued by Cloudflare to prove you're not a bot. We verify each token server-side once and discard it.
- Google Analytics 4 — anonymous page views, aggregate country and device stats. IP addresses are anonymized (
anonymize_ip: true). No cross-site tracking cookies.
Image moderation
Uploaded and linked images are sent to Sightengine for automated moderation (nudity, gore, offensive content). Sightengine does not retain images after scoring.
2. Why we process this data
- To operate the game and display your conquest to others.
- To take and process payments.
- To keep the platform safe from bots, spam and illegal content.
- To respond to your emails and legal obligations.
3. Third-party processors
- Supabase (Ireland/US) — database and image storage.
- Lemon Squeezy (US) — payments, tax, receipts.
- Cloudflare (US) — bot check (Turnstile), optional DNS.
- Sightengine (France) — image moderation.
- Vercel (US) — hosting and edge network.
- Google Analytics (US) — anonymized usage analytics.
Where data is transferred outside your region, it is protected by Standard Contractual Clauses or equivalent safeguards.
4. Your rights
You can, at any time, ask us to:
- Show you what personal data we hold about you.
- Delete a specific conquest, join or reported item.
- Delete all your entries and payment references.
- Object to further processing.
- Receive a machine-readable copy of your data.
Email bantermap@gmail.com from the address linked to your payment, or include enough identifiers (handle + approximate date + country) to prove ownership. We respond within 30 days.
5. Retention
- Active conquests: as long as the site is running.
- Overthrown / historical entries: retained for context of the thread.
- Hidden (reported) entries: retained for audit, not shown publicly.
- Payment references: 5 years (tax obligations).
- IP rate-limit data: 24 hours in memory.
- Analytics: default GA4 retention (2 months).
6. Cookies
BanterMap does not set functional cookies itself. Google Analytics sets _ga style cookies for anonymized session aggregation. You can opt out in your browser or via the official GA opt-out.
7. Children
BanterMap is not directed at children under 13 (16 in the EEA/UK). We do not knowingly collect data from them. If you believe a child has submitted content, email us and we'll remove it promptly.
8. Changes
We'll post any material changes to this Policy here with a new “last updated” date, and highlight them on the homepage for at least 7 days.
9. Contact
Data controller: BanterMap operator. Email: bantermap@gmail.com.