Privacy
What we keep, and why
Short version: an email address, your bids, and nothing else. We do not track you around the internet and we have nothing to sell.
Last updated . Draft. This describes what the system actually does today, verified against the code. It has not been reviewed by a lawyer.
What we collect
| Thing | Why |
|---|---|
| Email address | It is your account, and how we tell you that you have been outbid or that a lot is waiting for collection. |
| Password | Stored as a one-way hash by our authentication provider. Nobody here can read it, including us. |
| Paddle number | Issued once, identifies you on a lot without using your name. |
| Your bids | Every bid, permanently. This is the record of what you agreed to buy, and it is what protects you in a dispute. |
| Your maximum | Held so the system can bid for you. Never shown to another bidder, and not on the office screen. |
| Your watchlist | So the lots you starred are there on your phone and your laptop both. |
What we do not collect
We do not record your IP address or your browser when you bid. We run no analytics, no advertising pixels, and no cross-site trackers. There is no cookie banner because there is nothing to consent to: the only thing stored in your browser is the token that keeps you signed in.
Who else sees anything
Three companies are involved in serving this site, and each sees something:
- GitHub hosts the pages. Like any web host, it sees the requests that fetch them.
- Supabase holds the database and the sign-in system, on servers in the United States. Accounts, bids and watchlists live there.
- Google Fonts serves the typefaces. Loading a font from Google means Google receives your IP address. We use it for speed, and we would rather say so than not.
We do not sell anything to anyone, and we do not share your address with other bidders. A winning bidder’s contact details are visible only to us, and only so we can arrange collection.
What other bidders can see
Nothing that identifies you. Other people see that a lot has bids and what the price is. They do not see who bid, what your maximum is, or how many lots you are watching. That is enforced by the database, not by the page choosing not to show it.
How long we keep it
Bids are kept permanently. They are the record of a sale, and deleting them would leave both of us unable to prove what happened. Account details are kept while your paddle is active.
Your choices
Ask us for a copy of what we hold on you, or ask us to close your account, at CONTACT_EMAIL. Closing an account removes your contact details. Bids stay, because they are part of the sale record, but they stop being linked to a live account.
You can change your password any time from your paddle page.
Children
This is not a site for children and you must be old enough to enter a binding contract to bid.
Changes
If we start collecting something new — analytics, a pickup address, a card on file — this page changes first, and the date at the top changes with it.