🔒 Privacy & Cookie Policy

Last updated: March 16, 2026

1. Introduction

Punked.co ("we", "us", "our") respects your privacy. This Privacy & Cookie Policy explains how we collect, use, store, and protect your personal data when you visit our website, and your rights in relation to that data.

This policy applies to all visitors, including users in the European Economic Area (EEA), the United Kingdom, and Switzerland.

2. Data We Collect

We collect minimal data necessary to operate and improve the Service:

  • Email addresses - for magic link authentication (login)
  • Anonymous analytics data - IP addresses, user agents, referrers, and timestamps for prank hit tracking
  • Contact form submissions - name, email, subject, message, and IP address
  • Domain offer submissions - name, email, offer amount, message, and IP address

3. How We Use Your Data

  • To authenticate users and manage sessions
  • To track prank link analytics (views, clicks, geographic data)
  • To respond to contact form enquiries and domain offers
  • To prevent spam, abuse, and enforce rate limiting
  • To improve the Service and user experience
  • To serve relevant advertisements via Google AdSense

4. Cookies & Similar Technologies

Cookies are small text files stored on your device when you visit a website. We use the following types of cookies:

Essential Cookies

Required for the website to function. These include session cookies for login and security. You cannot opt out of these cookies.

Advertising Cookies

We use Google AdSense to display advertisements. Google and its partners may use cookies to serve ads based on your prior visits to this or other websites. These cookies allow Google to provide relevant advertising.

  • Google AdSense cookies may track browsing activity across websites
  • Google uses cookies such as the DSID, IDE, and NID cookies
  • You can opt out of personalised advertising at Google Ad Settings
  • You can visit aboutads.info to opt out of third-party advertising cookies

Analytics Cookies

We may use analytics tools to understand how visitors use the Service. These cookies collect anonymous, aggregated data.

5. Consent Management (EEA/UK/Switzerland)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we use Google Funding Choices, a Google-certified Consent Management Platform (CMP), to collect your consent before placing non-essential cookies.

  • A consent banner will be shown on your first visit
  • You can choose to accept or reject non-essential cookies
  • You can change your consent preferences at any time by clearing your browser cookies and revisiting the site
  • If you reject non-essential cookies, you will still see ads, but they will not be personalised

This complies with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection (FADP).

6. Third-Party Services

We use the following third-party services that may collect data:

  • Google AdSense - advertising (Google's ad policy)
  • Google Funding Choices - consent management for EEA/UK/Switzerland users

These services have their own privacy policies. We encourage you to review them.

7. Data Sharing

We do not sell your personal data. We may share data only in these circumstances:

  • With third-party advertising partners (Google) as described above, subject to your consent where required
  • When required by law or to respond to legal process
  • To protect the rights, safety, or property of Punked.co or its users

8. Data Retention

We retain your data only for as long as necessary:

  • Account data - until you request deletion
  • Prank analytics - indefinitely (anonymous/aggregated)
  • Contact messages - up to 12 months
  • Session cookies - until browser session ends or logout

9. Your Rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have the following rights:

  • Right of access - request a copy of your personal data
  • Right to rectification - request correction of inaccurate data
  • Right to erasure - request deletion of your personal data
  • Right to restrict processing - request limitation of data processing
  • Right to data portability - receive your data in a structured format
  • Right to object - object to processing based on legitimate interests
  • Right to withdraw consent - withdraw consent at any time

To exercise these rights, contact us via the Contact Page.

10. Children's Privacy

Punked.co is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We implement reasonable security measures to protect your data, including HTTPS encryption, secure session handling, and restricted database access. However, no method of transmission over the internet is 100% secure.

12. Changes to This Policy

We may update this Privacy & Cookie Policy at any time. Changes will be reflected by the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance.

13. Contact

For questions about this policy or to exercise your data rights, contact us via the Contact Page or the Abuse Report page.