Privacy

When you submit the application form we store: the amount you are contributing, your name, your brand or company name, your email address and your WhatsApp number — and, only if you choose to give them, your sector, your country or city, your link and your short message. The form does not collect a logo. We ask you for one by email while your placement is being invoiced, and we store it from then.

When you join the waiting list we store your email address, the tier you chose, your company name if you gave one, and — if you asked from a particular seat — which seat that was. We never ask for your name or your phone number.

We also store the language you used and a one-way cryptographic hash of your IP address. The hash is used to limit repeated automated submissions; the IP address itself is never written to our database and cannot be recovered from the hash.

We do not collect payment card details anywhere on this site. Payment happens by bank transfer, outside the site.

To send you a proforma invoice, to contact you about payment and about changes to your position on the board, and to display the material you asked us to display.

A waiting-list address is held for one thing and nothing else: to write to you when something changes on the part of the board you asked about — who holds it, and what it would take to pass them. It is never used for a newsletter or sold to anyone.

Your logo and brand name — and your message and link where you gave them — are published on gulfthrone.com for as long as your total keeps you on the board; that is the service you are buying. Afterwards your brand name, your total and how long you were displayed remain on the Fallen list, and a reign on the throne remains in the Hall of Reign. Both are permanent public records; the message and the link do not carry over to either. Your email address, phone number and name are never published at any point.

Turso — the database that stores reservation and waiting-list records.

Vercel — hosting for the site, Vercel Blob for the logo files, and Vercel Speed Insights for the page-speed measurement described below.

Cloudflare — Cloudflare Web Analytics, which counts visits, as described below.

Resend — delivery of the notification and confirmation emails.

We do not sell, rent or trade your details with anyone, and we run no advertising trackers on this site.

We set one cookie to remember your language choice, and one session cookie when an administrator signs in.

There are no analytics cookies, no advertising cookies and no third-party trackers. The analytics described in the next section set no cookie at all, which is why this site shows you no cookie banner.

Since 5 October 2026 we count visits with Cloudflare Web Analytics. A small script from Cloudflare (cloudflareinsights.com) reports the page, the site you came from, your country, your device type and browser, and how long the page took to load.

It sets no cookie and stores nothing on your device. It does not count visitors by IP address or follow anyone from page to page or from site to site. What we see are totals with no IP address in them: counts, not people.

Separately, Vercel Speed Insights measures how quickly pages load. For each page load it records the page, the loading timings, the connection speed, the device type, browser and operating system, and the country, through this site's own domain. It too sets no cookie, and nothing it records ties a measurement to you or to the other pages you read.

Reservation records that lapse without payment are retained for 12 months, then deleted.

Records of paid placements are retained for 6 years, as accounting records generally must be.

The logo file we hold for you is deleted once you have been off the board for ninety days. A copy shown in a Hall of Reign entry is kept, because that entry is permanent — you agreed to it on the application form, and you can ask us to take the whole entry down.

Waiting-list addresses are kept until you ask us to remove them, or until 12 months after we last wrote to you, whichever comes first.

The database keeps a rolling 24-hour recovery window, so a deleted record can survive in that backup for up to a day after deletion before it is gone for good.

You may ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to the contact address in the footer and we will respond within 30 days.

To come off the waiting list, reply to the confirmation email with the word “remove”. No account, no login and no form — the address is deleted.

Deletion requests are honoured except where we are required to retain accounting records for a paid placement.

Data is transmitted over TLS and stored with the providers listed above. The admin panel is password-protected and its session cookie is signed, http-only and expires after 12 hours.

For any privacy question, or to exercise the rights above, use the contact address in the footer of this site.