Privacy
Last updated 1 September 2026
Top Floor is a drawing of a building that companies buy floors in. It needs very little about you, so it collects very little. There is no advertising network on this site, no analytics service, and no cookie that survives you closing the tab.
If you are just looking
Your browser is given a random string when you arrive. It lives in sessionStorage, which the browser throws away when you close the tab, and it is used for exactly one thing: counting how many tabs are open on the site right now, and adding one to a running total of visits.
That string is not linked to anything. We do not store your IP address, your browser’s user-agent string, your location, or a fingerprint of your device. The row holding your string is deleted 75 seconds after your last ping at the earliest, and within ten minutes at the latest. Come back tomorrow and you are a new visitor, because there is nothing left to recognise you by.
The building’s sky follows your local time. That is worked out in your browser, from your device clock and time zone name. It is never sent to us, and we do not ask for your location.
If you buy a floor
We store what has to appear on the building or be kept as a record:
- The name and link you choose. These are public. That is the product.
- A logo, if you upload one. Also public.
- The amount, the date and a payment reference. Kept so the sale can be explained afterwards.
Your card never touches this site. Payment is handled by Stripe, on Stripe’s pages. We receive confirmation that a payment succeeded and a reference for it. We never see, and could not store, your card number.
Stripe processes your payment details as its own controller under its privacy policy.
If you make an offer on a floor
Your name, your link and the amount are public — an offer nobody can see is worth nothing to anyone. Your email address is not: it is stored so the floor’s owner can reach you if they accept, and it is not shown on the site.
What the shared weather knows
Anyone can press a button to make it rain on the building, and it rains for everyone. Nothing about who pressed it is recorded — not a name, not an address, not a session id. The only thing stored is which effect is running and when it expires.
Where it lives, and for how long
Everything is on Cloudflare — the database in D1, uploaded logos in R2. Deeds and the registry are kept permanently: they are the record of who bought what, and the site promises not to erase them. Presence rows go within ten minutes. Weather rows go within a minute of expiring.
Asking for your data, or its removal
Write to hello@topfloor.lol and you will get a copy of everything held about you, or have it corrected.
Deletion has one honest limit. If you bought a floor, the deed is the record of a completed sale and part of the public registry, so it stays. Your logo can be removed, your link can be changed, and your email address on an offer can be deleted on request. If you want the name itself taken off the building, that is a sale being unwound and we will talk about it — but it is not something a form can do.
Your rights
If you are in the EU or the UK, you have the right to access, correct, export, restrict and object to the processing of your personal data, and to complain to your national data protection authority. The lawful basis for the buyer data above is performance of a contract; for the visit counter it is legitimate interest in knowing whether anyone is here, served by data that cannot identify anyone.
Changes
If this page changes in a way that affects anybody who has already bought a floor, they will be emailed. Otherwise the date at the top moves.