Privacy Policy

Effective Date: August 21, 2026 · Last Updated: August 2026

Summary: We collect only what is strictly necessary to run the public leaderboard, track link clicks, and fulfill invoice requirements. We do not use third-party tracking pixels, we do not sell your personal data, and visitor IP addresses are irreversibly hashed for GDPR privacy.

1. Data Controller

The data controller responsible for the processing of personal data on outbid-eu.lol (accessible at https://outbid-eu.lol) is the operator of outbid-eu.lol ("we", "us", or "our").

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you may reach us via our official support channels or admin contact.

2. Information We Collect and Process

Public Leaderboard Information: When you submit a bid, we collect and publicly display the submitted product URL or X handle, display title, auto-scraped metadata (such as public open-graph descriptions and favicons), and the cumulative bid amount.
Payment & Billing Data: Payments and tax calculations are processed directly by our payment gateway partner, Stripe, Inc.. We do not store raw credit card or bank account numbers. For tax invoicing and EU VAT compliance, Stripe collects your billing details, company name, address, and VAT / Tax ID number.
Pseudonymized Analytics & Click Logs: To calculate live visitor counts and listing click statistics without tracking individual people, we apply a one-way cryptographic hash (SHA-256 with a unique server salt) to incoming IP addresses. Raw IP addresses are not stored in our click logs.
Technical Sessions: We utilize essential, first-party cookie/session tokens solely for secure administrator access, CSRF attack prevention, and real-time active visitor counting. We do not set third-party cross-site advertising cookies.

3. Legal Bases for Processing (GDPR Article 6)

We process your personal data under the following lawful bases:

Performance of a Contract (Art. 6(1)(b) GDPR): To process your bid, position your listing on the leaderboard, generate your invoice, and forward click traffic to your target URL.
Legitimate Interests (Art. 6(1)(f) GDPR): To ensure platform security, prevent click fraud, monitor real-time server health, and operate a reliable service.
Legal Obligation (Art. 6(1)(c) GDPR): To retain financial transaction records, order logs, and VAT invoices as mandated by applicable European tax and accounting laws.

4. Third-Party Service Providers (Data Processors)

We work with trusted third-party providers to operate outbid-eu.lol:

Stripe (Payment Processor): Stripe processes transactions, generates invoices, and validates EU VAT IDs. Please review the Stripe Privacy Policy.
Hosting Infrastructure: Our servers and container infrastructure are hosted within secure, high-availability data centers adhering to European data protection standards.

5. Data Retention

Public listings remain on the leaderboard as long as the service is active or until replaced by higher bids. Financial transaction records and tax invoice logs are retained in accordance with statutory accounting and tax retention periods (typically 7 to 10 years). Ephemeral real-time visitor session tokens expire automatically after 15 minutes of inactivity.

6. Your Rights Under the GDPR

If you reside in the European Economic Area (EEA) or UK, you are entitled to:

Right of Access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request deletion of your listing or personal data, subject to statutory retention obligations.
Right to Restriction of Processing (Art. 18 GDPR): Request restriction of processing under certain circumstances.
Right to Data Portability (Art. 20 GDPR): Request your data in a structured, machine-readable format.
Right to Lodge a Complaint: You have the right to file a complaint with your local Data Protection Supervisory Authority.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect service updates or regulatory requirements. Any modifications will be posted directly to this page with an updated Effective Date.