Last updated: August 21, 2026
This policy explains what personal data halfbid.lol collects, why, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR) and Spain's LOPDGDD. The data controller is the site operator identified in the Legal notice — replace the placeholders there with real contact details before relying on this policy.
Email address — collected when you place a bid. It is how we track your guaranteed halfbid credit balance, send payment receipts (via Stripe), and contact you about your listing if needed.
Listing content — the URL/handle and description you choose to submit, which is displayed publicly on the leaderboard by design.
Payment data — card details are entered directly into Stripe's own hosted Checkout page and never reach our servers. We only store the amount charged, a Stripe transaction reference, and whether the payment succeeded.
Basic technical data — a rolling count of page visits is kept for the public stats page. It is not tied to your email or used to build a profile of you.
To operate the leaderboard you pay to appear on and track your guaranteed credit balance — necessary to perform the contract you enter into with each bid (GDPR art. 6.1.b). To prevent abuse of the credit system — our legitimate interest (art. 6.1.f). Where we are legally required to keep payment records for tax purposes, that processing rests on a legal obligation (art. 6.1.c).
We use a small number of processors to run this site, each acting under their own data processing agreement: Stripe (payment processing), Supabase (database hosting), and Vercel (application hosting). We do not sell personal data, and we do not share it with advertisers — this site has no ads. Some of these providers may process data on servers outside the European Economic Area; where that happens, it is covered by their Standard Contractual Clauses.
Your email and credit balance are kept for as long as you might still have unused halfbid credit, plus the period required by Spanish tax law for transaction records (generally several years). You can ask us to delete your email from active use at any time — see your rights below — though some records may need to be retained for legal/tax compliance even after that request.
This site does not set advertising or tracking cookies, and does not use browser storage to profile visitors. Stripe, which hosts its own Checkout page for payments, may set its own cookies there under its own privacy policy — we don't control those.
Under GDPR you can ask to access, correct, delete, restrict, or export the personal data we hold about you, and you can object to processing based on our legitimate interest. To exercise any of these, email the contact address in the Legal notice. You can also lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), if you believe your rights have not been respected.