Privacy Policy

RarePeer is a leaderboard for high-school students. We collect what you give us (name, school, achievements, etc.) and what you do on the site (votes, invites). We use it to power rankings and improve the product. We don't sell your data. You can delete your account any time from your profile settings.

• Account info: email address, password (hashed by our auth provider), the name you display, your phone number if you provide one.
• Profile content: grade, state, school, intended major, GPA/SAT/ACT, activities, awards, AP scores, target schools, and other fields you fill out.
• Activity: head-to-head votes you cast, votes others cast on your profile, ELO score and history, invite-link clicks, and login timestamps.
• Technical data: IP address (used for rate limiting and abuse prevention), browser user-agent, and basic device info.

• Generating and updating leaderboard rankings (your ELO score).
• Showing other users your profile in head-to-head matchups.
• Sending you transactional notifications (e.g., login emails) and, if you opt in, weekly digests of activity on your profile.
• Detecting bots, vote manipulation, harassment, and other abuse.
• Improving the product (analyzing aggregated usage patterns).

We share data with service providers who help us operate the platform:

• Supabase — database, authentication, file storage.
• Vercel — hosting and request routing.
• Resend (or similar) — transactional email delivery, when applicable.

These providers act as data processors under our direction. We do not sell your personal information. We may disclose information if legally required (subpoena, court order) or to protect users from imminent harm.

By signing up, you understand that the following information is shown to other RarePeer users and visible in head-to-head matchups: your first name and last initial, school (if provided), grade, state, intended major, listed activities and awards, GPA/test-score range, and your ELO score and rank. Don't put anything in your profile fields you wouldn't want a classmate to see.

• Access & export: visit your profile to review the data we hold about you.
• Correction: edit any profile field directly from your profile page.
• Deletion: profile → settings → delete account. Hard-deletes your profile, votes you cast, and all associated records. Auth records are removed within 30 days.
• Opt-out of email: every email has an unsubscribe link.

RarePeer is designed for high-school students aged 13 and up. We do not knowingly collect data from children under 13. If we learn we've collected data from a user under 13, we will delete it. Parents and guardians can use the account-deletion flow in profile settings to remove their child's account.

We use cookies and browser local storage for: keeping you logged in, tracking invite-link visits to credit the inviter (the rp_inviter_token cookie expires after 30 days), and remembering UI preferences (e.g., whether live-feed pop-ups are muted). We don't use third-party advertising cookies.

We retain your data for as long as your account is active. After account deletion, your profile and votes are removed immediately; backups containing your data are rotated out within 30 days.

Our infrastructure is located in the United States. By using RarePeer, you consent to your data being processed in the U.S. If you're in a region with specific data-protection laws (GDPR, etc.), the rights described above apply to you regardless of where you live.

We'll update this page when our practices change. Material changes will be announced via in-app notice or email. The effective date at the top reflects the most recent revision.