Privacy

Last updated October 29, 2026.

What we store

• Listing name, URL, description, category, and optional logo URL.
• Bidder email, bid amount, board, and payment reference.
• Click timestamps for a listing. We do not build an advertising profile from them.
• An admin session cookie if you log in to moderate the site.

What we do not store

Card numbers, CVC codes, and full payment details stay with Stripe or the payment-link provider. We receive a confirmation that a checkout finished, plus the amount and the email you typed.

Why

We use this data to show the board, send an outbid email with a top-up link, count clicks, and let an admin approve or remove listings. Outbid email is the reason we ask for an address. If email delivery is not configured, the message is written to the server log instead of being sent.

Cookies

The public site does not set a tracking cookie. The admin cookie is httpOnly, lasts seven days, and is only set after a successful password login.

Where it lives

Production data is stored in Supabase. A server without Supabase credentials keeps a local file so the demo still runs. That file is not a production database.

Sharing

We do not sell personal information. Payment processors see what they need to charge the card. If you email us about a listing, we use the address you already gave us.

Requests

To ask for a copy or deletion of a bidder email, write to privacy@adfor.ai from that address and name the product URL. Deleting an email does not refund a bid. Rank history can stay on the public board without the address attached.