Privacy.

TopBid has no user accounts, so there is very little to collect. This page lists everything.

The one cookie

We set a single first-party cookie, topbid-visitor-id: a random identifier, HTTP-only, expiring after one year. It exists so that the browser which paid for a listing can raise it at the difference price and see its private click analytics. It carries no personal information and is not used for advertising or shared with anyone.

What we store when you bid

• The URL or handle you submitted, and the category and amount you chose.
• Your email address, passed to us by the merchant of record after payment. We never ask for it on the form — you have already given it to them at checkout. See below for what we do with it.
• Metadata we fetched from that destination — its title, description, icon and preview image — so the board can display it.
• The checkout and order identifiers returned by our payment provider, so we can match a payment to a listing and answer support questions.
• Your visitor cookie id, to establish who owns the listing.

We never receive your card number. Card details, billing address and tax identifiers go directly to Dodo Payments, who is the merchant of record. Their privacy policy covers that data.

What we store when someone clicks a listing

• Which listing was clicked, and when.
• The visitor cookie id, if present.
• A salted one-way hash of the IP address — never the address itself. It exists only to collapse repeat clicks from the same source inside a 30-minute window so click counts mean something. It cannot be reversed to an IP.
• The referring site's hostname and the country inferred by our host.

Email we send you

We use your address for one thing: telling you when another listing moves above yours on the board. That is the point of a leaderboard you paid to be on, and it is the only marketing email we send.

• Every one has a one-click unsubscribe. It takes effect immediately, needs no login, and your listing is unaffected.
• Delivery is handled by SendHustle, which processes the address on our behalf. We do not sell, rent or share it with anyone else.
• Service messages about a payment you made — a receipt, or a problem with your listing — may still reach you after unsubscribing.

Technical data

Our host records standard server logs — request paths, timestamps, user agents, IP addresses — for security and reliability. These are retained on their normal schedule.

Who else touches the data

• Dodo Payments — Merchant of record — payments, invoicing and tax
• Vercel — Hosting, edge network and cookieless page analytics
• Neon — Postgres database
• Datadog — Application logs and error monitoring
• SendHustle — Delivering outbid notification emails
• Anthropic — Category suggestion for new listings

When a new listing is submitted, its name and description are sent to our category suggestion provider to pick a category. Nothing personal is included in that request.

We do not sell data, and we do not run third-party advertising or tracking pixels.

How long we keep it

• Listings and payment records: kept while the listing exists, then as long as tax and accounting law requires.
• Click records: 24 months, then deleted.
• Email addresses: kept while the listing exists, so we can tell you when it is outranked.
• The visitor cookie: one year, or until you clear it.

Your choices

Clearing the topbid-visitor-id cookie removes the link between your browser and any listing you paid for — the listing stays on the board, but you lose the raise price and the private analytics view. To request access to or deletion of data associated with a listing you paid for, email hello@topbidai.com from the address on the receipt.

Contact

Naitik Varshney
hello@topbidai.com