Legal

Privacy Policy

Last updated: 19 September 2026. This policy explains what we collect, why, and how to ask us to change or delete it.

MomentShift (“we”, “us”) runs a public paid ranking board. Rankings are paid advertisements (placement fees), not editorial reviews and not auction results. This policy covers the website at https://momentshift.com and related emails (watch confirms, replies to contact).

We do not publish IP addresses, GPS coordinates, or a person’s real name on the board or listing stats. Public stats are aggregates (counts by country, clicks, visits).

1. Who we are

• Brand: MomentShift
• Website: https://momentshift.com
• Privacy and data requests: support@momentshift.com
• Contact form: https://momentshift.com/contact

The Terms of Service and Cancellation and Refund Policy describe the ranking placement product, payments, and refunds. This page is only about personal data.

2. What we collect

Board visitors

• A visitor hash derived from truncated IP, user-agent, and a time bucket (plus a first-party cookie if the browser keeps it). We use this to count unique visits and clicks, not to name you.
• Country from Cloudflare CF-IPCountry or similar GeoIP. We do not use this to set a listing’s home geo. Home geo is chosen by the person who pays for the listing.
• Path, referrer kind, UTC day, and whether the client looks like a crawler.
• Outbound click events through our redirect, stored against the listing and visitor hash, with country.

We do not store raw IP longer than needed to derive country and the hash. We do not store street address, GPS, or device advertising IDs for visitors.

People who pay for placement

• Listing URL or identity, name and description shown on the board, category, type, and optional home country or region you pick.
• USD amount and checkout status.
• Email if the payment provider or checkout sends it to us (payer_email), used for receipts and support, not published on the board.
• Payment provider references (processor payment id, status, failure reason). We do not store full card number, CVV, UPI PIN, or net-banking passwords. Those stay with the payment provider.

Watch emails

If you ask to watch a listing’s rank, we store the email, listing id, confirm and unsubscribe tokens, and timestamps. Unconfirmed addresses get no mail. Confirm and unsubscribe use magic links. We do not require an account.

Contact form

Name, email, topic, optional listing URL, and message. We use this to reply. We do not sell contact inboxes.

Cookies and similar

• Session cookie so forms and checkout stay yours in that browser.
• CSRF cookie to block forged posts.
• A first-party cookie may back the visitor hash so unique counts stay stable on the same browser.

These are first-party cookies we set. We do not run third-party ad pixels or Google AdSense on the live board.

3. How we use data

• Run the board: rank listings, show money in USD, record visits and clicks.
• Publish aggregates: listing stats, country tables, site pulse. Never IP, GPS, or a visitor’s name.
• Process placement payments through our payment partner and keep a payment tape of amounts (public dollars, not your card).
• Send watch mail after you confirm, and honour unsubscribe links.
• Answer contact messages and payment support.
• Detect abuse (crawlers, duplicate clicks, chargebacks) and keep the service secure.
• Meet accounting, tax, and payment-provider obligations.

We do not sell personal data. We do not sell traffic lists. Giveback is a company donation of net placement fees, not a use of your personal data as a charitable gift.

4. Legal bases (India)

We process personal data under the Digital Personal Data Protection Act, 2023, mainly: (a) your consent (watch emails, contact form), (b) performance of a contract (checkout and ranking placement), and (c) legitimate uses allowed by law such as security, fraud, and legal compliance. You may withdraw consent for watch mail by using the unsubscribe link.

5. What is public

Listing name, description, logo, destination URL or handle, category, type, home geo you chose, rank, amount paid, payment tape, and aggregate stats are public advertisements. Do not put secrets in a listing description. Payer email, visitor hashes, and raw IPs are not shown on listing pages.

6. Who we share with

• Payment provider (when we wire checkout): name or email they need to take the charge, amount, and our order reference. Their privacy policy applies to card and UPI data.
• Email delivery for watch confirm, unsubscribe, and replies we send.
• Hosting, CDN, and DNS (for example Cloudflare). They may see IP to route the request and set CF-IPCountry.
• Authorities if Indian law requires it.

We do not share visitor hashes or contact inboxes with advertisers. There is no marketplace of other sellers at checkout. MomentShift is the only merchant.

7. Retention

• Visitor hashes, visits, and clicks: kept as needed for public stats and abuse checks, then aggregated or deleted.
• Successful payments and listing identity: kept for the life of the public board, accounting, and chargebacks.
• Failed or abandoned checkouts: dropped after they expire, except as needed to debug a payment dispute.
• Watch emails: until you unsubscribe, or after a long idle period with no confirm.
• Contact messages: until we close the request, then as long as support records require.

8. Security

We use HTTPS, hashed watch tokens, and we do not store full payment credentials. No method is perfect. Do not send card numbers to support@momentshift.com. Use checkout only.

9. Children

The service is for people 18 and older. We do not knowingly collect data from children. Listings that exploit children are removed under the Terms, with no refund of a successful placement.

10. Your rights

You may ask us to:

• confirm whether we hold data about you;
• correct an email or listing you control;
• delete a watch, or a contact message that is no longer needed;
• stop watch mail (unsubscribe link in every watch email, or the unsubscribe page).

We may keep payment and listing records that the law or the payment provider requires. Public rank history for a listing you paid to place may remain as an advertisement record. Email support@momentshift.com with the address you used. We may ask you to prove control of that inbox. We aim to respond within 7 business days, and not later than the timelines under Indian law.

11. International access

The board is public worldwide. Hosting and the payment provider may process data outside India. We still apply this policy and Indian law to personal data we control.

12. Changes

We may update this policy. The date at the top will change. Continued use after an update means you accept the new policy for that use. A new payment is acceptance for that checkout.

13. Contact

Privacy questions and data requests: support@momentshift.com or Contact. Complaints about this policy can use the same address. We aim to respond within 7 business days.