Privacy Policy

Riivla ("we", "our", "us") operates riivla.com, a YouTube trending media site for general viewers. This policy explains what data we collect and how we handle it.

Riivla is operated by MNIII, an individual based in Seoul, Republic of Korea.

We do not require accounts and we do not use Google Analytics. Our analytics are cookieless, and we are not currently displaying ads.

• Service: to provide YouTube trending insights.
• Aggregate analytics: to understand high-level traffic patterns (page views per route).
• Operational integrity: to detect and mitigate abuse, fraud, and security incidents.

Because we do not use tracking cookies or process personal data for advertising, we rely on legitimate interest (Article 6(1)(f)) for our cookieless aggregate analytics, public YouTube data processing, and basic security logging. No consent banner is shown because no consent-requiring trackers are loaded.

Riivla offers an optional Chrome browser extension, "Riivla — YouTube Trending Rankings". Installing it is entirely optional and not required to use riivla.com.

• The extension stores only your preferences (country/region, category and theme), the last public rankings you opened, which of those videos you have already seen, and (only if you turn on YouTube ranks) a public list of currently trending video IDs locally in your browser (via chrome.storage.local). The list of seen videos is used only to count new videos for the toolbar badge and never leaves your browser. The extension does not create accounts, collect personal data, set tracking cookies, or serve advertising.
• It fetches only public trending data from riivla.com, the same public data shown on the website: when you open the popup, and about once an hour in the background to update the toolbar badge. These requests carry only the region and category you selected.
• By default the extension does not read, access, or modify any page you visit. If you turn on "Show ranks on YouTube videos", Chrome asks you to allow access to youtube.com. The extension then reads only the video ID in the address of YouTube video pages, compares it with the trending list stored in your browser, and shows a small label with the video's chart ranks. The video ID and what you watch are never sent to Riivla or anyone else, and nothing else on the page is read. Turning the option off removes that access.
• Clicking an item or link opens YouTube or Riivla in a new browser tab. For any riivla.com pages you then visit, the standard anonymous, cookieless website analytics described elsewhere in this policy apply.

• Aggregate analytics: retained per Vercel's Web Analytics defaults; not linkable to individuals.
• YouTube API data: retained as it is public and refreshed regularly.
• Local browser preferences: stored in your browser until you clear them.

• HTTPS: all traffic between your browser and our servers is encrypted with TLS.
• At rest: data stored in Supabase is encrypted at rest.

If you are in the European Economic Area (EEA), the GDPR gives you rights including access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.

Because we do not maintain user accounts and our analytics are not linkable to individuals, most of these rights have little to act on. To exercise them or ask questions, email us at rii.mniii@gmail.com. We will respond within 30 days.

Primary application data is stored by Supabase in South Korea (Seoul region). South Korea has received an adequacy decision from the European Commission. Vercel hosting and analytics may process requests via globally distributed infrastructure under their privacy framework.

Our service is not directed to children under 16 (or under 13 in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact rii.mniii@gmail.com and we will delete it promptly.

We may update this policy from time to time. The "Last updated" date above reflects the latest revision.

This policy is governed by the laws of the Republic of Korea. We comply with the GDPR for EU users.