Privacy

What we collect

• What you publish by bidding: display name, handle, destination link, category, amount, and the banner visual where applicable. This information is public by nature — that is the point of the service.
• Payments: handled by Stripe. We never see or store your card number; we only keep the payment session id and the details of the action bought (amount, target), in order to apply the bid and handle refunds.
• Audience measurement: via DataFast, which uses measurement and attribution cookies (page views, traffic source, visitor id). This data feeds the site statistics — some of which are displayed publicly (visitor counter, clicks per entry).
• Technical log: the IP address seen by the server for the "online" counter (a rolling 30-second window, in memory, never written to the database) and for anti-abuse rate limiting on image uploads.

What we don't do with it

• No selling or renting of data to third parties.
• No account creation, no password: we hold no credentials about you.
• No third-party advertising cookies.

Where the data lives

The site is hosted on DigitalOcean and the database on DigitalOcean / MongoDB Atlas (European Union or United States depending on the cluster region). Payments live at Stripe, audience measurement at DataFast.

Retention periods

• Board entries and banners: as long as they are displayed (banners expire at the end of the booked period; pending unpaid visuals are purged within 2 hours).
• Payment records: the legal accounting retention period.

Your rights

Under the GDPR, you can request access to, correction of, or deletion of data about you (for example removing an entry you paid for) by writing to [email protected]. Data controller: QUALIT BUSINESS SAS.