Privacy Policy

Effective 2026-08-24 · web3outbid

There is no account here, no advertising, and no cross-site tracking — only a first-party count of how many people are on the site. Most of what the board shows is already public on a blockchain. This page sets out exactly what is stored, where it goes, and what we can and cannot delete.

1. 1.Who is responsible for your data

   Bloodbee Informatique et Conseil, registered at 67 quai Clémenceau, 69300, Caluire-et-Cuire, France, is the controller of the personal data described here. For any privacy question, write to mathieu@bloodbee.space.

2. 2.There is no account

   The service has no sign-up, no password, no email address, and no user profile. We never ask for your name, your date of birth, or any identity document. You interact with the board by connecting a wallet and paying.

3. 3.What we store

   What you submit: the URL you list, the name you give it, and the category you choose. These are public by design and displayed on the board.

   What we read from the blockchain: the transaction hash of your payment and the wallet address it was sent from. We record these to match your payment to your bid and to show payment history on the listing page. They are already public on the chain you used.

   What we derive: the total paid per listing, and a counter of how many times a listing's link has been followed. That counter is a single number per listing. It is not tied to you, and we do not log who clicked.

   Information about the listed site: we fetch each listed page once to read its icon and its meta description, and store those to display on the board.

   Technical logs: our hosting provider records standard server logs, which include IP addresses, for security and reliability purposes.

   Audience measurement: we count how many browsers are on the site right now, how many have ever visited, and how many pages have been loaded. A browser is recognised by a random identifier we generate and store in a cookie, which carries nothing about you and is never matched against your wallet, your listings, or any other data. We do not record which pages you viewed, where you came from, or your IP address alongside it.

4. 4.What we do not do

   We run no advertising pixels and no cross-site trackers. We do not build profiles, do not sell or rent data, and do not share data with advertisers. Our audience measurement is first-party, counts only totals, and cannot follow you to another site.

5. 5.On-chain data is public and permanent

   Your payment exists on a public blockchain, not on our servers. Anyone can read it, and neither we nor you can delete or alter it. A wallet address may be treated as personal data where it can be linked to you.

   This has a consequence worth understanding before you pay: if you later ask us to erase your data, we can remove it from our database and from the board, but we cannot remove anything from the blockchain. That record is permanent and outside anyone's control.

6. 6.Why we may process this data

   To perform the service you asked for: verifying your payment, crediting your bid, and displaying the board. To pursue our legitimate interest in keeping the service secure, preventing abuse, and understanding aggregate usage. To comply with legal obligations where they apply to us.

7. 7.Who else receives data

   Our hosting provider, Vercel, and our database provider, Turso, process data on our instructions in order to run the service.

   Vercel Web Analytics and Speed Insights: your browser reports page views and page-loading performance to our hosting provider so that we can see aggregate traffic and how fast the site is. These are cookieless, do not follow you across sites, and produce counts rather than profiles.

   Blockchain node providers: when you connect a wallet or send a payment, your browser talks to blockchain RPC endpoints directly. Those providers can see your IP address and the requests your wallet makes. This connection is between your browser and them, and is not something we route or control.

   Your wallet: browser-extension and mobile wallets are independent software with their own privacy policies. We do not control what they collect.

   Icon providers: we fetch site icons through our own server rather than from your browser, specifically so that your IP address is not disclosed to those providers when you view the board.

8. 8.Cookies and local storage

   We set no advertising cookies and no cross-site tracking cookies. We set one first-party cookie, ob_vid, holding a random identifier so that one browser is not counted as a new visitor on every page load. It lasts a year, is readable only by our server, and is used for nothing but the counters on our stats page. Your wallet software may store connection state in your browser's local storage so that it can reconnect. That data stays in your browser and is not transmitted to us. Clearing site data removes it.

9. 9.How long we keep it

   Listings, bids, and payment records are retained for as long as the board displays them, because they are the public record of the service. Server logs are retained for a limited period as configured by our hosting provider. Delisted entries may be retained where we need them to defend a legal claim or comply with an obligation.

10. 10.Your rights

    Depending on where you live, you may have the right to access the data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. To exercise any of these, write to mathieu@bloodbee.space.

    Two honest limits. First, because we hold no identity data, we may be unable to link a request to any record unless you can demonstrate control of the relevant wallet. Second, as explained above, erasure cannot extend to the blockchain.

    If you are in the EEA or the UK and you believe we have handled your data improperly, you may lodge a complaint with your national supervisory authority. Our lead authority is CNIL (Commission nationale de l'informatique et des libertés) in France.

11. 11.International transfers

    Our providers may process data outside your country, including outside the EEA. Where that happens we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

12. 12.Children

    The service is not directed at children and is not intended for anyone below the age of majority in their jurisdiction. We do not knowingly collect data from children.

13. 13.Changes to this policy

    If this policy changes materially, we will publish the updated version on this page with a new effective date.

← Back to the board