Privacy Policy & Telemetry

At Bidboard, we believe public attention markets should not come at the expense of visitor privacy. We operate on a strict data-minimization architecture:

• Zero third-party tracking pixels or behavioral cross-site profiling.
• No invasive personal identifiers or intrusive cookie banners required.
• Strict compliance with global privacy regulations including GDPR and CCPA.

When you click on a project listing, our redirect handler (/go/[id]) verifies and records the interaction to display transparent, public click metrics to creators.

To prevent bot manipulation without spying on users:

• Zero Plain IP Storage: We never log or store raw IP addresses in plaintext database tables.
• Cryptographic HMAC Hashing: An anonymous, one-way cryptographic hash is generated using a server-side rotating secret salt. This verifies uniqueness without exposing who you are.
• Deduplication Window: Repeated rapid clicks from the same anonymous hash within a short timeframe are recorded as a single unique visit.

All payment card processing for bids and rank claims is handled exclusively through PCI-DSS Level 1 compliant partners (including Whop).

When you submit a project to Bidboard, the following information becomes part of the publicly visible attention index:

• Destination website URL or social handle.
• Project title, description, and preview image / avatar fetched from public OpenGraph tags.
• Total verified dollar amount spent and resulting leaderboard rank.
• Timestamp of the latest bid placement.

We employ lightweight, privacy-focused telemetry to monitor general aggregate server performance and verified placement clicks. No personally identifiable information (PII) is gathered or linked to individual device fingerprints.

You have the right to request the modification or permanent deletion of your project listing from our public database. If you wish to delist an asset or update cached metadata, please contact our support team through our contact page.