Legal

Privacy Policy

Last updated: 19 April 2026

Who we are

MoveRank is a U.S.-based relocation research platform founded by Clinton Macleod. We help individuals compare salaries, visa pathways, cost of living, and quality of life across 45 countries to make informed relocation decisions.

Contact: [email protected]

What data we collect

Account data

When you create an account: your email address, name (optional), and password (hashed, we never see the plaintext). If you sign in with Google, we receive your name and email from Google.

Profile data

Information you choose to provide: passport country, job title. This is used to personalise your country recommendations.

Usage data

Quiz answers and results (stored to show your history), saved countries, and pages you visit. We use Google Analytics (GA4) to understand how the site is used this data is anonymised and aggregated.

Payment data

If you upgrade to Pro, payments are processed by Stripe. We receive confirmation that payment was made but never see your card details. Stripe stores payment data under their own privacy policy.

Why we collect it

Provide the service

To show you personalised country rankings, save your results, and maintain your account.

Process payments

To verify Pro upgrades and prevent fraud.

Improve the product

Aggregated analytics help us understand which features are useful and where users get stuck.

Communicate with you

To send transactional emails (account confirmation, payment receipt). We do not send marketing emails without your explicit consent.

Legal basis (GDPR)

We process your data under the following legal bases:

ContractProcessing necessary to provide the service you signed up for.

Legitimate interestsAnalytics to improve the product.

Legal obligationKeeping records for tax and legal compliance.

Who we share data with

Supabase

Database and authentication provider. Data stored in EU region.

Stripe

Payment processing. PCI-DSS compliant.

Google Analytics

Anonymised usage analytics.

Resend

Transactional email delivery.

Vercel

Hosting and infrastructure.

We do not sell your data to third parties. Ever.

Cookies

We use one cookie: your authentication session, set by Supabase. This is strictly necessary for the site to function and does not require consent under GDPR. We do not use advertising or tracking cookies.

How long we keep your data

Account data: until you delete your account

Quiz results and saved countries: until you delete your account

Payment records: 7 years (legal requirement)

Analytics data: 26 months (Google Analytics default)

Your rights under GDPR

As an EU resident you have the right to:

Access

Request a copy of your data.

Rectification

Correct inaccurate data.

Erasure

Delete your account and all associated data.

Portability

Receive your data in a machine-readable format.

Objection

Object to processing based on legitimate interests.

To exercise any of these rights, email [email protected]. You can also delete your account directly from your profile settings.

Security

We use industry-standard security practices: HTTPS everywhere, hashed passwords, JWT-based authentication, and strict Content Security Policy headers. No system is perfectly secure — if you discover a vulnerability please email us responsibly.

Changes to this policy

We will update this page if our data practices change and notify users by email for material changes. The date at the top of this page always reflects the last update.

Contact

Questions about this policy: [email protected]

Also useful:TermsContact