Privacy
Last updated 8 September 2026
Top Floor is a drawing of a building that companies buy floors in. It needs very little about you, so it collects very little. There is no advertising network on this site, no analytics service, and no cookie that survives you closing the tab.
If you are just looking
Your browser is given a random string when you arrive. It lives in sessionStorage, which the browser throws away when you close the tab, and it is used for exactly one thing: counting how many tabs are open on the site right now, and adding one to a running total of visits.
That string is not linked to anything. We do not store your IP address, your browser’s user-agent string, your location, or a fingerprint of your device. The row holding your string is deleted 75 seconds after your last ping at the earliest, and within ten minutes at the latest. Come back tomorrow and you are a new visitor, because there is nothing left to recognise you by.
The building’s sky follows your local time. That is worked out in your browser, from your device clock and time zone name. It is never sent to us, and we do not ask for your location.
If you ask for something
The suggestion box takes two things: what you would like drawn on the building, and your X handle. Both are kept until the request is answered or turned down, and the handle is kept with it.
The handle is collected in order to be published. If the thing you asked for gets drawn, your handle goes on the site beside it and we tag you on X — that is the whole reason the field is there, and if you would rather not be named, the honest thing is not to fill it in. Nothing else about you is recorded: no address, no email, no session that outlives the tab.
Most requests are never drawn. There is no queue, no position and no promise — a person reads them and makes the few they can.
If you buy a floor
We store what has to appear on the building or be kept as a record:
- The name and link you choose. These are public. That is the product.
- A logo, if you upload one. Also public.
- The amount, the date and a payment reference. Kept so the sale can be explained afterwards.
Your card never touches this site. Payment is handled by Stripe, on Stripe’s pages. We receive confirmation that a payment succeeded and a reference for it. We never see, and could not store, your card number.
Stripe processes your payment details as its own controller under its privacy policy.
If you make an offer on a floor
Your name, your link and the amount are public — an offer nobody can see is worth nothing to anyone. Your email address is not: it is stored so the floor’s owner can reach you if they accept, and it is not shown on the site.
What the shared weather knows
Anyone can press a button to make it rain on the building, and it rains for everyone. Nothing about who pressed it is recorded — not a name, not an address, not a session id. The only thing stored is which effect is running and when it expires.
Where it lives, and for how long
Everything is on Cloudflare — the database in D1, uploaded logos in R2. Deeds and the registry are kept permanently: they are the record of who bought what, and the site promises not to erase them. Presence rows go within ten minutes. Weather rows go within a minute of expiring.
Cloudflare, as the company serving the page, sees your IP address in the act of delivering it and of stopping the same address opening a hundred checkouts a minute. It keeps its own request logs for a few days, which is the one place an address of yours exists at all. It is never written into our database, never attached to your visit, your purchase or your offer, and there is nothing we could look you up by.
Asking for your data, or its removal
Write to hello@topfloor.lol and you will get a copy of everything held about you, or have it corrected.
Deletion has one honest limit. If you bought a floor, the deed is the record of a completed sale and part of the public registry, so it stays. Your logo can be removed, your link can be changed, and your email address on an offer can be deleted on request. If you want the name itself taken off the building, that is a sale being unwound and we will talk about it — but it is not something a form can do.
Your rights
If you are in the EU or the UK, you have the right to access, correct, export, restrict and object to the processing of your personal data, and to complain to your national data protection authority. The lawful basis for the buyer data above is performance of a contract; for the visit counter it is legitimate interest in knowing whether anyone is here, served by data that cannot identify anyone; and for the handle on a request it is your consent, given by typing it into a field that says what it is for. You can withdraw that consent by writing to us, and if the drawing is already up we will take the credit off it.
Changes
If this page changes in a way that affects anybody who has already bought a floor, they will be emailed. Otherwise the date at the top moves.