eu-outbid.lol has no accounts. There is nothing to sign up for, no password, and no profile. What we hold is a short list, and most of it is already public because you chose to put it on a public leaderboard.
What we hold
- Your listing. The website or X handle you submitted, the title and description read from that page, the amount you have paid, and how many times the listing has been clicked. All of it is shown publicly on the board — that is the product.
- A payment reference. The order and checkout identifiers Polar gives us, and the amount. We never see or store your card details.
- Your IP address, briefly. Used as a rate-limiting key so one person cannot flood the checkout. Held for at most an hour, never written to the board's database, and never shown to anyone.
Who else is involved
- Polar takes the payment as merchant of record. They collect your name, email, billing address and tax details, and they issue your invoice. Their privacy policy governs that data, not this one.
- Supabase hosts the database that holds the board.
- Vercel serves the site and keeps short-lived request logs.
- DataFast counts visitors. It loads only if you accept analytics cookies, and it produces the visitor number on the front page.
- Sentry receives error reports when something breaks. Our logger strips personal data before anything is sent.
Cookies
The site sets no cookies of its own. If you accept analytics cookies, DataFast sets its own to count visitors; reject and it never loads. The board works either way, and nothing about your listing depends on your answer.
Why we are allowed to hold it
Your listing and payment reference are processed to perform the contract you entered when you paid. IP-based rate limiting rests on our legitimate interest in keeping the checkout usable and not being billed for abuse. Analytics runs on your consent alone.
How long
- Listings have no expiry. A listing stays on the board until it is removed, because a permanent place on the board is what was bought.
- Payment records are kept as long as tax law requires.
- Rate-limiting keys expire within an hour.
Your rights
Under the GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. Write to alessandro@alessandroafloarei.com and we will answer within a month.
Two honest limits. We can take your listing off the board, but we cannot make the people who already saw it forget it. And we cannot delete payment records we are legally required to keep. You may also complain to your national data protection authority.