Privacy Policy

BW Digital BV is the controller for the personal data used by notbidding.lol. Questions, access requests and deletion requests can be sent to [email protected].

What we use

We use your account email, the listing content you submit, payment references, moderation records and service messages to create and run your listing. The legal basis is the contract you ask us to perform. We keep security logs, rate limits and a limited audit trail to prevent abuse and defend the service; that is our legitimate interest. Card details stay with Stripe and are never stored by this application.

A click or card view can include a rotating pseudonymous visitor hash, a broad browser or bot class and a coarse referrer class. The application does not intentionally store raw IP addresses. Traffic events are deleted after thirteen months. Expired sign-in links and sessions are deleted within thirty days. Account, listing, payment and audit records remain while needed to provide the permanent service, handle disputes and meet legal accounting duties.

Who processes data

Our infrastructure and database host process application data for us. Stripe processes payments, Resend sends service email, and Cloudflare R2 stores listing images when configured. Google Tag Manager or analytics loads only after you choose analytics cookies. These providers may process data outside Belgium; where required, we rely on an adequacy decision or contractual transfer safeguards.

Email we send

Account and payment email is part of the service you bought: the sign-in link you ask for, your payment confirmation, refunds, and anything that happens to a listing you paid for. The legal basis is the contract, so this email has no off switch for as long as you hold a listing.

We also send one activity digest every four weeks, with your front page turns, card views and clicks. It is the only scheduled email we send, we skip it entirely when nothing happened, and we never email you when your listing appears on the front page. You can turn it off on your email settings page or through the unsubscribe link in any digest, and doing so does not affect the account and payment email above. We record bounces and spam complaints reported by our email provider so we stop writing to addresses that cannot or do not want to receive mail.

Your choices and rights

You can refuse analytics cookies and change that choice later. Depending on the law that applies, you may ask to access, correct, export, restrict or delete your data, object to certain uses, or withdraw consent. You may also complain to the Belgian Data Protection Authority. We do not use personal data to make an automated decision with legal or similarly significant effects.