Privacy Policy

Who this is about

MarkYours (https://markyours.lol) is operated by Varun Chaudhary, who decides what information the site collects and why — the role the law calls the data controller. This policy explains what the site collects, why, who else sees it, and what you can ask us to do about it.

Everything here describes how the site actually works. Where a third party handles your information under its own policy rather than ours, this document says so and names them.

The short answer

There are no accounts on MarkYours — no sign-up, no password, nothing to log into. There are no tracking cookies, no analytics scripts, no advertising pixels, and no third-party profiling of any kind. We do not sell information about you, and we have no advertising business to sell it to.

What we hold is, almost entirely, what you deliberately published: the claim you paid to put on the map. That is public on purpose — the entire product is showing it to people.

What you give us when you claim

Claiming a territory sends us the following, and it is all published:

• the product or company name you entered;
• the link you want your logo to point at;
• the logo image you uploaded;
• your tagline, if you wrote one;
• the display name you chose — up to 24 characters — along with the country and flag you picked; and
• the territory colour you selected.

We also record what the claim cost and when it completed, and we store an identifier that your own browser generated the first time you set a display name. That identifier is a random string. It is not linked to your name, your email, or your payment, and it exists so the map can tell one claimant apart from another.

All of the above is public by design. It appears on the map, in the live feed, in the shared preview images, and in a territory’s list of past holders. Please do not put anything private into a display name, a tagline, or a logo — treat every field on the claim form as a billboard, because that is what it is.

What stays in your own browser

The display name, country, and flag you pick are saved in your browser’s local storage under the key markyours-user, so you do not have to type them again. That is stored on your device, not on our servers, and it does not reach us at all unless and until you submit a claim.

It is not a cookie, it is not sent with every request, and it cannot be read by any other site. Clearing your browser’s site data for MarkYours deletes it, and nothing breaks when you do.

What we collect automatically

Three things, and we have kept each one as thin as it can usefully be:

• Your IP address, for rate limiting. When you claim, upload an image, load a territory’s history, or follow a claimant’s link, your IP address is used to count how many times that has happened recently, so one person cannot hammer the site or manufacture traffic. It is held in the server’s memory for the length of the counting window and is never written to our database.
• A click count per territory. Following a logo’s link adds one to a number on that territory. We store the total and nothing else — not who clicked, not when, not from where. There is no per-visitor record to build a profile from.
• A count of open tabs. While the map is open your browser joins a live channel and announces a randomly generated identifier, so the site can show how many people are watching. It is generated fresh for every tab, it is tied to nothing else, and it disappears the moment you close the page.

Beyond that, our hosting and database providers keep their own standard server logs of requests — including IP addresses — for security and reliability. That is ordinary infrastructure logging, done under their policies, and we do not mine it.

Payments

Payments are handled by Razorpay, our payment gateway. Razorpay collects what a payment requires — typically your name, email address, card or other payment details, and information it needs for fraud checks and its own regulatory obligations — and holds it under its own privacy policy.

Your card number never reaches MarkYours. The checkout is Razorpay’s, running in Razorpay’s own window; we do not receive, see, or store card details, and we could not produce them if asked.

What comes back to us from Razorpay is the order identifier, the amount, the currency, and whether the payment was captured — enough to grant the territory you paid for and to match a payment to a claim if you write to us about it. Razorpay keeps its own records for the period financial law requires of it.

Note that Razorpay is a processor here, not the seller. Varun Chaudhary is the merchant of record for every claim, so the tax and accounting records for a sale are ours to keep.

The logo you upload

Logo images are stored in our file storage under a randomly generated filename and served from a public address, because the whole point is that everyone on the map can see them. Anyone with the address can open the image, including after your claim has been taken.

We store the file as you send it and do not strip information embedded inside it. If your image carries metadata you would rather not publish — camera details, location, an author’s name — remove it before uploading, as you would before posting the image anywhere else public.

Who else your browser talks to

Using the site involves these companies, and no others:

• Vercel — hosts the site and serves every page. It sees the requests your browser makes, including your IP address.
• Supabase — the database, the image storage, and the live channel that keeps the map current. Claim records and logos live here.
• Razorpay — loaded only when you open a checkout, and it is where the payment happens.
• unpkg — a public code and asset host, used for the Earth textures on the 3D globe view. Requesting those images shows unpkg your IP address, as loading an image from any other site would. The flat map view does not use it.

Typefaces are bundled into the site and served from our own domain, so your browser does not request fonts from Google or anyone else while reading this. Share buttons are ordinary links: nothing is sent to X until you choose to click one.

What we do not do

We do not sell, rent, or trade your information. We do not run advertising trackers, behavioural profiling, or third-party analytics. We do not build a profile of what you looked at, and we do not follow you across other websites — the site sends a header asking browsers to keep it out of interest-based advertising groups.

We do not send marketing email, because we never collect an email address in the first place. If you write to us, we have your address only because you used it.

We share information outside the companies named above only where the law requires it — a binding legal request, or defending a legal claim — or where you have asked us to.

Why we are allowed to hold it

Where the law asks for a lawful basis, ours are:

• Performing our contract with you — we cannot publish the claim you paid for without holding what you asked us to publish.
• Our legitimate interests — keeping the site up, stopping abuse, and counting clicks in aggregate so claimants can see whether a territory was worth it. We have kept this to the minimum that achieves it.
• Legal obligation — tax and accounting records relating to your payment, which Varun Chaudhary must keep as the seller of record, alongside the records Razorpay keeps for its own regulatory purposes.

How long we keep it

A completed claim is kept as part of a territory’s history — who held it before, and what they paid — which is a permanent part of what the site is. Uploaded logos are kept while that history stands. Rate-limiting counts last for the length of their window, usually a minute, and are then gone. The tab count exists only while your tab is open.

If you want a past claim’s content taken down, ask us and we will remove it. Some record of the payment itself will remain — with Razorpay, and in the accounting recordsVarun Chaudhary is obliged to keep as the seller.

Your rights

Depending on where you live — including under the Digital Personal Data Protection Act in India, the GDPR in the EU and the UK, and state privacy laws in the United States — you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything wrong;
• delete it, or take a published claim down;
• stop or limit a particular use of it; or
• have someone act for you if you are unable to yourself.

Write to contact@markyours.lol and tell us which territory and which name on the claim, so we can find the right record — with no accounts, that is usually the only way we can identify one. We will answer within 30 days. California residents: we do not sell or share personal information as those laws define it, and we will not treat you differently for asking.

If you think we have handled this badly, please tell us first — but you are entitled to complain to your local data protection authority instead, and you can go straight to them.

Where your information is

MarkYours is a site on the internet and its providers run servers in several countries, so your information may be processed outside the country you live in — including in the United States and the European Union. Where information moves between countries, it does so under the standard safeguards our providers have in place for those transfers.

Keeping it safe

The site is served over HTTPS. Claim records are not readable directly from any browser — every read goes through our own server, which returns only the handful of fields that are meant to be public. Image uploads use one-time permissions issued per upload, and the keys that can write to the database exist only on the server and never in the page you are reading.

No system is perfectly secure, and we are not going to claim otherwise. What we can say is that the amount of information here worth stealing is deliberately small: there are no passwords, no email lists, and no card numbers to lose.

Children

MarkYours is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has submitted something to the site, write to contact@markyours.lol and we will remove it.

Changes to this policy

If what we collect changes, this page changes with it, and the effective date at the top moves. Continuing to use the site after that means the updated policy applies. This policy is governed by the laws of India, and sits alongside our terms & conditions.