Information we process
- Public listing data: app URL or X profile, name, pitch, category, owner or creator handle, rank, bid, destination clicks, and optional Meta Ad Library information.
- Payment and owner data: Stripe receives the payer's email and payment details. Nittro stores a one-way hash of the owner email for listing control, not the plaintext email in its leaderboard database.
- Traffic data: clicks, timestamps, user-agent signals, and a one-way visitor hash. Raw payment-card details are never received by Nittro.
- Optional public signals: an app owner may submit an active Meta ad count and its public Meta Ad Library link. Nittro labels this as owner-submitted unless separately verified.
How information is used
Data is used to operate ranking and checkout, prevent abuse, count traffic, support customers, enforce rules, reconcile payments, and produce clearly labeled aggregate insights for builders.
Service providers
Stripe processes payments. Cloudflare-backed infrastructure stores application records and serves the site. Meta and X host any public pages opened through submitted links. These providers process data under their own terms and security commitments. Nittro does not sell personal data.
Revenue verification
Any future payment-provider verification is optional and read-only. Only aggregate metrics selected for the profile may be published. Customer names, emails, card data, and transaction-level personal information are not public. A verification badge identifies its provider and freshness.
Retention and choices
Public bid history and accounting records may be retained to preserve the integrity of the board and meet legal obligations. Hashed click-event identifiers use a 90-day retention window and are purged as traffic is processed; short-lived abuse-control records expire with their rate-limit window. Security logs are retained only as reasonably needed. To request access, correction, or deletion of eligible personal data, email hello@nittro.co. Removing eligible personal data may not remove non-personal payment totals or records Nittro must legally keep.
Security and international use
Reasonable technical and organizational safeguards are used, but no internet service is risk-free. Nittro is designed for a US-market launch; information may be processed in the United States or other locations where its providers operate.