1. What we collect
- Purchase data: your email address, the display name you choose, the content and links you submit, your bid amount, timestamps, and a hashed version of your IP address kept to prevent abuse. Your email is never shown publicly.
- Payment data: handled by Stripe. We receive a payment reference and status, not your card number.
- Uploaded images: stored in a private Cloudflare R2 bucket and served by this site as part of your slot. We record the file type, its size and a hashed IP address with each upload to prevent abuse.
- Usage analytics: page views, which slots are opened, buyer-mode activation, purchase funnel steps and outbound link clicks. Of these, our own database keeps only slot opens (with a random per-browser session id and the page path) and the purchase and ownership events raised by our payment and email flows. Clicks on an owner's link are logged separately with the destination, the referring page and a hashed user agent, never a raw IP address. We also use PostHog (EU-hosted) in cookieless mode: it records aggregate page views, referrer, browser and device without cookies, without storing your IP address and without a cross-site identifier; visitors are counted with a hash that changes every day and cannot be reversed. If your browser sends a Do Not Track signal, PostHog does not track your visit. We do not use third-party advertising trackers.
- Emails: we log which transactional emails were sent (via Resend) and whether delivery succeeded.
2. Why we use it
To process purchases, transfer ownership, display your slot, send transactional emails (confirmations, outbid notices, management links), prevent abuse, measure which parts of the page attract attention, and show owners how their slot performs.
3. Public information
Your display name, submitted content, website link, bid amount and ownership dates are public, appear in the slot's ownership history and leaderboard, and remain public permanently after you are outbid. Do not include personal data you do not want public.
4. Sharing
We share data only with the providers needed to run the service: Stripe (payments), Resend (email), Cloudflare (image storage), Turso (database), PostHog (cookieless analytics, EU) and Vercel (hosting). We do not sell personal data.
5. Retention
Ownership records are permanent by design. Analytics events and logs are kept as long as needed for the purposes above. You can request deletion of your email address and non-public data at hello@ownpagebid.lol; public historical ownership records may be anonymised rather than deleted.
6. Your rights
Depending on where you live you may have rights to access, correct, delete or export your data, or object to processing. Contact hello@ownpagebid.lol.
7. Cookies and storage
We use no advertising cookies, and our analytics provider (PostHog) sets none either, nor does it use local storage. We store a session id in your browser's session storage for analytics, your buyer-mode preference and last-used email/name in local storage for convenience, and an admin session cookie for administrators only.