Privacy

This says what Charts Up keeps about you, why, and how to make it go. It is short because there is not much of it.

One person is responsible for what is kept here, reachable at chartsup0909@gmail.com.

Everything below exists for one of four reasons: to know that a bump came from a real person, to show you your own bumps, to notice a farm of accounts inviting itself, or to put a chart you made up with your name on it.

Signing in through a social network is the only way in. Not signing in means reading the charts without moving anything, which works and always will.

What we keep

The id the social network gives your account there, and the handle on it. That id is the only thing that identifies you to us — an email address is never used for it.

The name your social network shows for you, re-read every time you sign in. It appears on your own profile page and, once a chart you made is live, on that chart as the person who made it — nowhere else public. A simplified copy of it is kept too — lower-cased, with look-alike letters folded together — so a search finds the account whatever letters the name was typed with.

The address of your profile picture on the social network's own servers. We keep the address, never the picture, and it is your browser — and the browser of anyone looking at a live chart you made — that fetches it.

An email address, only if we have one. If you sign in with Google, the address Google has verified for your account is taken from it at sign-in — unless you removed an address here or said no when asked, and never in place of one you typed. Any other way in, you can leave one on your profile. It never signs you in, two people may use the same one, and you can change or remove it on your profile at any time. If you say no, the date is kept so the question stops coming back; if you remove one, the date is kept so Google's copy is not put back.

For each signed-in browser: a one-way hash of the cookie in it, when it started, when it was last used and when it expires. The cookie itself exists only in your browser, and what we hold cannot be turned back into it.

How many bumps you have, every change to that number with the reason for each, and when your bumps were last brought back up to three for the week.

Every bump you spend and every like you leave: which chart, which name, and when — including bumps made without signing in, which are kept without any name. If you bump without signing in, we also keep a random code from the charts_up_visitor cookie, stored only as a one-way hash, with how many of your bumps are left this week and when they come back. It is deleted after eight days at most, or as soon as you sign in on that browser — at which point the bumps you gave there move onto your account. Bumps given without signing in stay on the charts either way.

Your invite link, and who joined through it — the account on each side, and whether it has been rewarded yet.

Suggestions sent through the suggestion form, before charts could be made here: the title, the names, which language they were written in, and a simplified copy of the title. Nothing new is added to them, and they are deleted with the account.

Charts you make: the title, the five names and any links, the language you wrote them in, a simplified copy of the title so the same chart sent twice is noticed, when you sent it, and what we decided — with any note we left you. The other language is drafted by Cloudflare Workers AI and then checked by a person; Cloudflare already runs this site, and says it does not use what it translates to train anything. Once a chart of yours is live it shows your name and profile picture as the person who made it. If you delete your account, charts of yours that never went live are deleted; live ones stay, because other people have bumped them, but without your name or picture.

When your account was made, when it last signed in, and when you were last here. And if you delete the account, when that happened.

Whether an account has been suspended, and whether an invite was held for a human to look at.

If there is an address, we write to it: a welcome once; one email when a chart you made goes live; and otherwise only when a chart you bumped has moved since you were last here — at most twice a week, and never two days running. Cloudflare delivers these emails for us. To keep to that we store which kind of email went to you and on which day — never what it said — along with the language you signed in in, so the email arrives in it, and whether you have turned email off. Every email has a link that stops them, and your profile has a switch for it.

We keep a one-way hash of the address a sign-up came from, under a salt that changes every month, and delete it after 90 days. We never store the address itself. The counters that stop one address hammering the site work the same way: a hash tied to the action being counted, kept only while that counter's window is open — a day at the longest. For bumps made without signing in, an address is counted by its network, so the counter covers the connection rather than one device on it.

Cookies

Four are needed for the site to work: charts_up_session keeps you signed in, charts_up_oauth holds a sign-in that is halfway through, for ten minutes, charts_up_intent holds a bump you tapped just before signing in, also for ten minutes, so it happens when you come back, and charts_up_visitor holds the bumps you can give without signing in, for up to eight days, and is set only when you tap Bump. On the live site the browser holds all four with __Host- in front of the name.

Three remember a choice and nothing else: charts-up-theme (light or dark), NEXT_LOCALE (Hebrew or English), and charts_up_last_provider (which social network you used last, so that button is marked). None of them is used to follow you, here or anywhere else.

Two pieces of third-party code can run on this site, both Cloudflare's. One is the visit counter, added to every page by the network that serves it, so we can tell whether anyone is finding the place: it sets no cookie, it reports totals rather than people — how many times a page was opened, from which country, on what kind of device, and the like — and it cannot recognise you on another site. The other is Turnstile, Cloudflare's check that a person rather than a script is bumping. It loads only when somebody who is not signed in taps Bump, sets no cookie on this site, and sends Cloudflare your connection's address and some browser signals to make that call; we receive only whether the check passed. No cookie here is used to follow you between sites.

There is no money in this product. Nothing here is for sale, and we hold no card details of any kind.

How long

What is above is kept for as long as the account exists. The hashed address is cleared once it is more than 90 days old. Deleting the account removes the identifying parts, and any chart you made that never went live; the bumps and likes stay, with nothing on them that says who left them, and so do live charts you made, without your name on them — so the charts stay truthful.

What you can ask for

You can ask what we hold about you, ask for it to be corrected, and ask for it to go. Write to chartsup0909@gmail.com.

You can also delete the account yourself, from your profile page.

If you signed in through Facebook, Meta can ask us to delete your account on your behalf, and we do.

Named on a chart and would rather not be? Write to us and we'll take it down.