Legal
Privacy Policy
Last updated: August 26, 2026
What we collect
Listings and bids — the URL or handle you list, bid amounts and timestamps. These are public by design: the board is a public leaderboard.
Payment data — payments are processed by our payment provider (Stripe). We receive confirmation of the payment and, where provided, the email used at checkout (for receipts and outbid notifications). We never see or store card numbers.
Usage counters — anonymous session identifiers (a random ID in your browser's localStorage) power the online/visitor counters, and outbound clicks are deduplicated using a short-lived hash of IP and browser signature, kept for 48 hours. We do not build browsing profiles and we do not use tracking cookies.
localStorage — your theme preference, your anonymous session ID, and (if you create a listing) your private edit token are stored in your own browser only.
What we don't do
We do not sell your data, run third-party advertising trackers, or share personal data with anyone except the processors below.
Third parties
Stripe — payment processing (their privacy policy applies to checkout). Google Favicon service / unavatar — listing icons are loaded by your browser directly from these services, which see the request as with any embedded image. Cloudflare — hosting and anonymized web analytics.
Retention & your rights
Bid history is retained indefinitely — it is the substance of the leaderboard. Click dedupe hashes are deleted after 48 hours; idle presence records are aggregated into a counter and deleted after 24 hours. To request removal of personal data (e.g. an email used at checkout), contact us via the About page; note that public bid records for a listing are not personal data and stay on the board.
Changes
Material changes to this policy will be reflected on this page with a new date.