Privacy
Short, because there isn't much. There are no accounts, no cookies and no advertising trackers on this site.
What's on the board is public
A listing is a website address, plus a description and icon read from that site, plus what has been paid for it and how many times it has been clicked. All of that is public — it's the point of the board. None of it identifies a person.
Payments
Payments are handled by Stripe, which acts as merchant of record. Your email and card details go to Stripe, not to us — we never see or store a card number.
What we keep is the amount, the time, and Stripe's reference for the transaction, so a payment can be matched to a listing and counted once. Stripe's own privacy policy governs what they hold.
Clicks
When you click a listing, we count it. To stop scripts inflating those counts we need to tell visitors apart briefly, so your IP address is hashed — turned into a fingerprint that can't be reversed — and stored with the listing and a timestamp.
Those records are deleted after two hours. The raw address is never written down.
Counting visitors
Page views are counted by Vercel Analytics. It is cookieless: nothing is stored on your device, you aren't given an identifier that persists between days, and you can't be followed from here to any other site.
What it records is aggregate — which pages were viewed, roughly where from, what kind of device. We use it to know whether anyone is looking at the board, which is also what tells a listing what its place is worth.
What loads from elsewhere
Listing icons are served by Google's favicon service, and App Store listings use Apple's, so viewing the board makes a request to those, which see your IP address as they would for any image. Nothing else third-party runs on these pages.
Where it lives
The database is hosted by Supabase in Ireland. The site runs on Vercel, which keeps short-lived server logs that include IP addresses, as any web server does.
Your rights
You can ask what we hold about you, ask for it to be deleted, or object to how it's used. In practice there is very little to find — email hello@finalbid.lol and we'll deal with it.
For anything about a payment — a receipt, a refund, or the data attached to it — Stripe is the controller and can act directly.