Privacy.

TopBid has no user accounts, so there is very little to collect. This page lists everything.

The one cookie

We set a single first-party cookie, topbid-visitor-id: a random identifier, HTTP-only, expiring after one year. It exists so that the browser which paid for a listing can raise it at the difference price and see its private click analytics. It carries no personal information and is not used for advertising or shared with anyone.

What we store when you bid

• The URL or handle you submitted, and the category and amount you chose.
• Metadata we fetched from that destination — its title, description, icon and preview image — so the board can display it.
• The checkout and order identifiers returned by our payment provider, so we can match a payment to a listing and answer support questions.
• Your visitor cookie id, to establish who owns the listing.

We never receive your card number. Card details, billing address and tax identifiers go directly to Dodo Payments, who is the merchant of record. Their privacy policy covers that data.

What we store when someone clicks a listing

• Which listing was clicked, and when.
• The visitor cookie id, if present.
• A salted one-way hash of the IP address — never the address itself. It exists only to collapse repeat clicks from the same source inside a 30-minute window so click counts mean something. It cannot be reversed to an IP.
• The referring site's hostname and the country inferred by our host.

Technical data

Our host records standard server logs — request paths, timestamps, user agents, IP addresses — for security and reliability. These are retained on their normal schedule.

Who else touches the data

• Dodo Payments — Merchant of record — payments, invoicing and tax
• Vercel — Hosting, edge network and cookieless page analytics
• Neon — Postgres database
• Datadog — Application logs and error monitoring
• Anthropic — Category suggestion for new listings

When a new listing is submitted, its name and description are sent to our category suggestion provider to pick a category. Nothing personal is included in that request.

We do not sell data, and we do not run third-party advertising or tracking pixels.

How long we keep it

• Listings and payment records: kept while the listing exists, then as long as tax and accounting law requires.
• Click records: 24 months, then deleted.
• The visitor cookie: one year, or until you clear it.

Your choices

Clearing the topbid-visitor-id cookie removes the link between your browser and any listing you paid for — the listing stays on the board, but you lose the raise price and the private analytics view. To request access to or deletion of data associated with a listing you paid for, email hello@topbidai.com from the address on the receipt.

Contact

Naitik Varshney
hello@topbidai.com