Privacy
What we collect, why we are allowed to, how long we keep it, and how to get rid of it.
Version 0.1-draft · 2026-08-26 · back to the board
If you just visit the board
Nothing is stored about you. No analytics cookies, no tracking pixels, no fingerprinting.
If you click a listing
Clicking a listing routes through a redirect that counts the click so the advertiser can be charged for it. At that moment we process your IP address and user agent.
- We never store your IP. It is combined with your user agent and hashed (HMAC-SHA256) under a salt that rotates every day. The result is a fixed-length value we cannot reverse and cannot link to you.
- Why we’re allowed to: legitimate interest — counting a click once per visitor is necessary to bill an advertiser honestly and to detect fraudulent traffic. We use the least identifying method that achieves it, and the daily salt rotation means the value stops being linkable within 24 hours.
- How long: raw click records are deleted after 90 days. Daily totals, which contain no personal data, are kept indefinitely.
- Where you go next: we pass no identifying information to the site you visit. If its owner has enabled reconciliation tagging, the link carries an anonymous click id — a counter, not you.
If you sign in
We store your email address, a hash of your session token, and the listings you have proved you own. We do not store passwords because there are none. We use your email only to send sign-in links and notifications about your own listings — never marketing, never a list.
If you pay
Card details never reach our servers. Payment is handled by our merchant of record, who is the seller of record for your purchase and holds the payment instrument. We keep the amount, currency, status, and timestamp.
Who else processes your data
| Who | What for | What they see |
|---|---|---|
| Hosting provider | Serving the site | Request metadata, including IP, transiently |
| Database provider | Storing the board | Everything described above, at rest |
| Merchant of record | Taking payment, remitting tax | Your payment details and billing information |
| Email provider | Sign-in links and listing notifications | Your email address and the message |
Named providers are listed in our deployment configuration; the concrete names go here before launch. We hold a data processing agreement with each.
Your rights
- Access. Sign in and request an export. You get everything we hold that is linkable to you, as JSON.
- Erasure. Ask and we delete your account, your sessions, and your sign-in tokens, and unlink you from any listings you own.
- What survives erasure, and why. Transaction records are kept to meet tax and accounting obligations — a legal duty that outlasts a deletion request. They stop being connected to you. The export you receive says exactly what was kept.
- Your clicks are not retrievable. Not a refusal: a visitor is a salted hash under a rotating salt, so we genuinely cannot determine which clicks were yours. That is the design, and the reason there is so little to ask for.
- Objection and complaint. You can object to the click-counting processing described above, and you can complain to your local data protection authority.
To exercise any of these, email the address on the terms page. We respond within 30 days.
Changelog
- 0.1-draft — 2026-08-26 — Drafted. Not yet reviewed by counsel.