Privacy Policy

Effective Date: 28 October 2025

1. Scope of Data Processing

MevaSearch Rankera processes only the minimal amount of technical data necessary for the proper operation of the service and to ensure system security.

The following data may be processed:

• Encrypted IP address,
• Random identifier rankera_uid,
• Interaction timestamp,
• Review content voluntarily submitted by the user,
• Anonymized analytics data (via Ixavence Analytics, based on Matomo), including visited pages and basic interaction statistics.

No data enabling direct identification of an individual (such as identity documents, phone numbers, or exact locations) are collected.

2. Purposes of Processing

Data are used solely for the following purposes:

• maintaining system security,
• analyzing performance and stability,
• protection against spam and abuse,
• generating anonymous statistics (e.g., number of reviews, visits, or search queries).

All analytics are processed privately and securely, with no tracking for advertising or resale of information.

3. Cookies

The service uses only essential cookies:

Name	Type	Purpose	Storage Duration
rankera_uid	persistent	anonymous user identifier	365 days
PHPSESSID	session	maintaining session and CSRF tokens	until end of session

Analytics cookies (from Ixavence Analytics) are anonymized and used exclusively for internal statistical purposes.

No advertising or third-party tracking cookies are used.

4. Data Retention

• System logs: up to 90 days, then automatically deleted.
• Blocks (e.g., spam/flood): expire automatically after the block period.
• Cookies: up to 1 year.
• Contact form data: up to 12 months.
• Analytics data: stored in anonymized form only.

5. Security

MevaSearch Rankera implements modern security mechanisms, including:

• IP anonymization,
• XSS, CSRF, and clickjacking protections,
• strict security headers (CSP, X-Frame-Options, HSTS),
• encrypted HTTPS connections (when available).

Access to data is limited to authorized members of the Ixavence team only.

6. Data Sharing

Data are not sold, transferred, or shared with any third parties, except for:

• law enforcement or supervisory authorities — upon valid legal request,
• hosting providers — only to the extent necessary to maintain infrastructure.

7. Abuse and Cooperation with Authorities

In cases of detected abuse (e.g., illegal content, attacks, manipulation, or MevaSearch Rankera code modification), the Administrator has the right to:

• temporarily store and secure logs,
• disclose technical data to relevant authorities (e.g., police, CERT Polska, prosecutor's office),
• suspend user access or related services.

Data are disclosed only under applicable law or upon written official request.

The user may be informed of data disclosure unless prohibited by law.

8. User Rights

Users have the right to:

• access their data,
• request correction or deletion of data,
• restrict processing,
• object to processing,
• file a complaint to the President of the Personal Data Protection Office (UODO).

Requests should be directed to: support@ixavence.org

9. Policy Updates

This Privacy Policy may be updated periodically.

The date of the most recent update is always displayed at the top of the document.

10. Summary

MevaSearch Rankera protects user privacy, does not track personal behavior, and does not use data for commercial purposes.

All analytics are handled internally through Ixavence Analytics (based on Matomo) — fully anonymized, private, and secure.

We operate according to the principles of an open, safe, and independent internet — consistent with the values of the Ixavence collective.