Privacy Policy

The controller for personal data processed through the Service is [Operator legal name], an individual based in [country / state]. Contact: ddotdev@outlook.com.

We keep the Service small. We collect only what we need to run the board, take payment, stop abuse, and understand traffic in aggregate.

• Anonymous browser key. A random ID stored in your browser’s localStorage (not a tracking cookie). We use it for the “online now” heartbeat on the stats page and to count a click-through on a listing at most once per day per browser. It is not your name and is never sent to advertisers.
• Checkout and listing data. The URL or X handle you submit, the category, the bid amount, the name you enter as the backer, and the public name, description, and image we resolve for that destination. Stripe checkout and payment-intent identifiers are stored so we can place the ranking.
• Payment data. Card details and billing identity are collected by Stripe, not by us. Stripe may send us confirmation that you paid and the amount. See Stripe’s own privacy notice.
• Click and traffic counts. When someone opens a listing from the board we increment a single number on that listing. We do not store per-click rows, IP addresses, or IP hashes. Page views are counted as one integer per day. Presence (“online now”) is a short-lived heartbeat row that is pruned after a few minutes.
• Technical data. Standard request data such as user agent, referrer, and IP address may be processed transiently by our hosting provider to serve and secure the Service.
• Messages you send us. If you email a notice, a category correction, or a privacy request, we keep that correspondence as needed to respond and to keep a legal record.

The Service does not use advertising cookies and does not load any third-party analytics script. Your browser stores only: the anonymous key described above, a per-session flag so a visit is counted once, and your light/dark theme preference. These are strictly necessary for checkout, click protection, and remembering your theme.

• Contract — to take payment, create or raise a listing, show rank, and provide the Service you asked for.
• Legitimate interests — to keep the board fair (rate limits, duplicate-click filtering), display public listing metadata, measure visits in aggregate, debug outages, and defend legal claims. You may object as described below.
• Legal obligation — to keep tax, accounting, and complaint records where the law requires it.

Rank, bid amount, company name, backer name, category, description, image, and the destination link on the board are public. Anyone can see them, including search engines, and each champion gets a shareable page at /champion/<id>. Do not list a destination, or enter a name, that you do not want shown publicly. We fetch public metadata from the site or X profile you submit so visitors can recognize the listing; that fetch may disclose to the destination that CompanyBid requested the page.

• Stripe — checkout and payment confirmation.
• Hosting, database, and edge infrastructure (currently Vercel and Convex) so the site can run.
• Favicon and metadata services (for example Google and DuckDuckGo favicon endpoints, and the destination site itself) so we can show a logo, name, and description.
• Professional advisers, authorities, or a buyer of the Service, if we must share data to comply with law, enforce the Terms, or transfer the project.

We do not sell your personal data. Some processors may be outside the European Economic Area; where we rely on them we use appropriate safeguards such as standard contractual clauses or an equivalent mechanism.

• The anonymous browser key lives in your browser until you clear site data.
• Presence heartbeats are deleted within minutes of going stale.
• Public ranking entries stay while the listing is on the board and may remain in backups or activity history for a limited time after a takedown.
• Stripe identifiers and amounts are kept as long as needed for accounting, tax, fraud, and dispute handling.
• Click counts and daily page-view counts are aggregate integers and are not tied to a person.

If the GDPR or a similar law applies to you, you may ask us to access, correct, delete, or export personal data we hold about you, to restrict or object to certain processing, and to withdraw consent where processing was based on consent. You may also lodge a complaint with a supervisory authority in [country / state] or in your country of residence. Email ddotdev@outlook.com. We may need enough information to find your data. Public listing content that is also on your own website or X profile is not made private just by appearing on the board — you can ask us to remove the listing.

The Service is for adults. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data we can identify.

We may update this policy when the Service or the law changes. The date at the top of this page is the current version. If a change is material, we will post the updated policy here.