Privacy Policy
No accounts, no ads and no analytics — what NickTop actually stores when you generate a nickname, who else sees your traffic, and how long anything is kept.
The NickTop privacy policy in one line: there is no account, no advertising, no analytics of any kind, and the site sets no cookies of its own on an ordinary visit. What follows describes what this specific site actually does, checked against its own code and its own database rather than copied from a template.
Last updated: 12 August 2026. We change this date only when the practices below actually change.
What NickTop does not do
Most of a normal privacy policy does not apply here, so it is quicker to start with what is absent. NickTop has:
- No user accounts. There is nothing to sign up for, so we never ask for a name, an email address or a password to use the site.
- No advertising. No ad network, no ad cookies, no ad identifiers, no affiliate trackers.
- No analytics. No Google Analytics, no Tag Manager, no Matomo, Plausible, Hotjar or Clarity. Nothing counts your visit or builds a profile of it.
- No third-party assets. The fonts are hosted on this domain, not fetched from Google Fonts, and there are no external scripts, widgets or embeds. Loading a page on this site contacts nicktop.com — the only other host your browser may reach is Cloudflare’s network-error reporting endpoint, which is part of the protection layer described below and carries no page or profile data.
What the nickname generator sends and stores
The generator is the only part of the site that sends anything anywhere, so it is worth being precise about it. When you type a word and press generate, your browser sends that word to this site. This site then does two things with it, server to server:
- It looks up matching emoji. The word is turned into a plain lowercase slug and that slug is sent to the decoration service that supplies our emoji and symbol sets. This request is made by our server, not by your browser: your IP address, your user agent and your cookies are not part of it, and the service receives the word alone with no way to connect it to you.
- It adds one to a counter. A row is kept per name per day — the name text, the date, and how many times it was built. That is the whole row. There is no visitor identifier in it, no IP address, no session ID and no account, because none of those exist here. This is what makes the “most copied” ranking reflect real use rather than our guesswork.
Once a week, an aggregate of those counters leaves this server: for each name, the name text, the category it was generated under, and two numbers — how many sessions built it and how many times. It is sent to the shared demand service the site uses to decide what to write about next. It contains no visitor data of any kind, because none was collected in the first place.
One more thing happens on every generate, and it is the only place your IP address is used at all. To stop the tool being scraped, each request carries a short-lived token calculated from a site secret, the current hour and your IP address. The token is checked and thrown away. Your address is never written to a table, never logged alongside a name, and never leaves the server.
Cookies and what your browser keeps
NickTop sets no cookies of its own when you read a page. We checked the live response headers while writing this: an ordinary page view returns no Set-Cookie at all. Three things can still end up in your browser, and all three are worth naming:
| What | Where it lives | Set when | How to clear it |
|---|---|---|---|
| Saved nicknames | Your browser’s local storage, on your device | You tap the heart on a name | Untap the heart, or clear site data in your browser |
| Which pages you rated | Your browser’s local storage, on your device | You rate a page helpful or not | Clear site data in your browser |
| Comment details | A standard WordPress cookie on your device | You leave a comment and tick “save my details” | Leave the box unticked, or clear site data |
Local storage is not a cookie and is never sent to us. Your saved list lives on your device only; we cannot read it, cannot restore it if you clear it, and cannot move it to another device for you.
Comments
If a page has comments open and you leave one, WordPress stores the comment text, the name and email address you typed, your IP address and your browser’s user agent string. That is standard WordPress behaviour and it exists so comments can be moderated. No spam-filtering service is running on this site, so your comment is not sent anywhere for scanning.
Comment avatars are served by Gravatar. When an avatar loads, Gravatar receives a one-way hash of the commenter’s email address along with the ordinary details of any image request, including the IP address of whoever is reading the page. If that matters to you, do not leave a comment — everything else on the site works without one.
Who else can see your traffic
Two companies sit between you and this site by necessity. Neither is optional for a visitor, and neither is paid by us to collect anything:
- Cloudflare proxies and protects the site. Every request reaches Cloudflare before it reaches our server, so Cloudflare sees your IP address and may set its own security cookie to tell a browser from a bot. This is infrastructure, not measurement.
- Our hosting provider keeps standard web-server logs — address, timestamp, page, status code — for operational and abuse-handling purposes. We do not read those logs to build any picture of an individual, and nothing in them is joined to the nickname counters.
How long we keep things
The daily name counters are kept for 35 days and then deleted by a scheduled job that runs once a day. That window exists so a weekly and a monthly ranking can both be calculated honestly; nothing needs the data after it. Weekly aggregates that have already been sent are cleared from the outbox as soon as the send is confirmed.
Comments stay until they are deleted or the comment is removed on request. Emails you send us are kept only as long as they are useful: a removal or copyright thread is kept as a record of the decision, an ordinary question is deleted once it is answered.
Children
NickTop is a general-audience tool and is not directed at children under 13. There is no sign-up, so we do not knowingly collect personal information from anyone, children included. If you believe a child has posted personal information in a comment on this site, write to us and we will remove it.
Your rights, and how to use them
Depending on where you live, the GDPR, the UK GDPR or the CCPA give you rights over personal data a site holds about you: to see it, correct it, delete it, take it elsewhere, or object to its use. Here is the honest position on exercising them at NickTop: in almost every case there is nothing to hand over. Without an account, a tracker or an analytics profile, there is no record tied to you. The two real exceptions are a comment you left and an email you sent us.
To act on either, write to mail@nicktop.com from the address involved and say what you want done. We answer within two business days and we do not charge for it. We have never sold personal information and have no mechanism to do so, so there is nothing to opt out of under the CCPA.
The contact page lists which subject line to use for each kind of request.
Changes to this policy
If what the site does changes — a new feature that stores something, a service added or dropped — this page is updated and the date at the top moves with it. We do not refresh the date to look active. There is no mailing list to announce changes on, because there is no mailing list.
Questions about anything here go to the same inbox as everything else, and you can always start from NickTop.