Privacy Policy.

rebut.my is operated by AZNAN HAMIM BIN ABDUL WAHAB. Privacy questions, corrections and deletion requests can be sent to darkhell2020@gmail.com.

• Listings: URL or handle, display name, bio, profile picture, category, Rank Value and timestamps.
• Public social profiles: URL, platform, username and public metadata such as name, bio, profile picture and available public statistics. rebut.my does not ask for social login, OTPs, passwords or access tokens.
• Visitor counter: a first-party HttpOnly cookie with a random ID and first-seen and last-seen times. This ID is not intended to identify your real name.
• Payments: when checkout is enabled, the transaction reference, amount, currency, status and provider ID needed for verification and reconciliation. Card details remain with the payment provider.
• Technical and security data: standard logs such as request time, network address, user agent and errors for operations, abuse prevention and security.

Data is used to publish and organise the leaderboard, import public metadata, process contributions, prevent fraud or abuse, resolve disputes and keep the service working.

We process data when necessary to provide the requested service, for legitimate operational and security interests, or to meet legal obligations.

rebut.my uses a scraper to retrieve the name, bio and picture from publicly available Instagram, Facebook, Threads or TikTok profiles. A submission does not open a login session or give rebut.my control of the account.

Infrastructure and data-retrieval providers that support this feature may process and cache the data. If a profile is deleted, made private or changed, you can request correction or deletion of the listing.

Listing and ranking information is displayed publicly. Other data is shared only with providers needed for hosting, security, payments and public social-data retrieval, or when required by law. rebut.my does not sell your passwords, access tokens or personal data.

• Social-metadata caches are kept as needed for display stability and are generally refreshed after the cache period ends.
• The first-party visitor ID is stored for up to 12 months from the relevant visit.
• Public listings, metadata and Rank Value are kept as needed for leaderboard history, operations and dispute resolution, or until a valid deletion request is completed.
• Transaction and security records are kept for a reasonable or legally required period for accounting, fraud prevention and compliance.

We use access controls, an HttpOnly cookie for the visitor counter and HTTPS connections. No system can guarantee absolute security; material incidents will be handled in line with applicable obligations.

You can request access to, correction of or deletion of data related to you, subject to identity verification and records that must be kept by law. We may ask for proof of control or a relationship with the profile to prevent someone else from deleting your listing.

This service is not directed at children below the age at which they can provide their own consent. If you believe a child's data was submitted without appropriate permission, contact us for prompt review.

This policy may be updated as features or obligations change. The effective date above will be updated for material changes.