Privacy

Short version

niubid has no user accounts, registration, or advertising trackers. We process only the data needed to operate a paid public leaderboard: what you submit, order results returned by the payment provider, anonymous visit and click statistics, and aggregate Google Analytics usage measurement.

Information we collect

• Listing submissions. The URL or @handle you enter, your bid amount, and display metadata from the target website, such as its name, icon, and public description. Query parameters and URL fragments are removed before storage.
• Order records. Payment providers such as Waffo return order status, amount, and payment-related reference data to us. We retain this information to attribute bids and resolve disputes; we do not access or store card numbers.
• Visit and click analytics. To display online visitors and today's visits, we use a random first-party visitor cookie and record anonymous session timing. Google Analytics also receives pseudonymous usage data such as page views, browser and device information, and approximate location derived from IP address. When someone clicks a listing, we record only the listing ID and timestamp for click counts and the trending board.
• Basic server logs. Cloudflare processes IP addresses and request metadata to provide, protect, and troubleshoot the service.

What we do not do

• We do not have account profiles, passwords, or login data because the site has no account system.
• We do not use advertising, retargeting, or profiling cookies. Google Analytics is configured with Google advertising and ad-personalization signals disabled. The niubid_visitor cookie is used only for this site's online-visitor and daily-visit counts; theme preference stays only in your browser and is not sent to us.
• We do not sell or rent data to anyone.

Third parties

• Waffo processes checkout and card information under its own privacy policy. We receive only order results and payment-related reference data needed for a bid.
• Cloudflare hosts the website, Cloudflare D1 database, and basic service logs. The site is served over HTTPS; the visitor-statistics cookie is HttpOnly, Secure, and SameSite=Lax to reduce exposure to client-side scripts and cross-site misuse.
• Google Favicon service. Your browser requests listing icons directly from Google's public favicon endpoint.
• Google Analytics. Google processes usage measurements for this site under its own privacy policy. We configure GA4 with Google advertising and ad-personalization signals disabled.

Data retention and your rights

We retain order and listing records for as long as needed for accounting, dispute handling, and operations. Anonymous visitor sessions are removed from server-side statistics after the day changes, and click events are used only for aggregate statistics. We retain only information needed to provide the service and use HTTPS in transit, restricted server-side access, and the cookie protections described above. You may ask us to access, correct, or delete listing or order data relating to you, or ask what information we hold about you, by contacting us; we will respond within a reasonable time. As there are no accounts, there is no separate account-closure process.

Policy changes

We may update this policy. The date at the top is the latest revision date; continued use of the site after a change means acceptance of the updated policy.

Contact

For privacy requests or questions, contact: