Privacy Policy
What TopBidder.lol collects, why, who it touches, and what you control.
Who runs this
TopBidder.lol is operated by an independent operator (@thawndev). Privacy contact: thawndev@gmail.com.
What is collected
- Your public wallet address when you bid, claim, or register for payouts.
- The name, description, and image you submit for a spot, and the URL you enter.
- Payment records: on-chain transaction hashes and amounts tied to your bids.
- A random session identifier (kept in your browser only) that counts distinct visitors, and the pages you view (to measure traffic — no advertising profile, no cross-site tracking).
- Standard server logs kept by the hosting provider.
No accounts with passwords, no emails collected for marketing, no advertising cookies, no cross-site trackers.
Why it is processed
To run the board (grant ranks to paying wallets), to settle earnings to the right wallet, to keep the service safe and honest, and to comply with law. The legal bases are contract performance and legitimate operation; where consent is required (for optional analytics), it is asked before anything loads and can be withdrawn at any time from the footer.
Who else touches data
- Supabase (database, auth gateway, edge functions): stores the board, bids, and payment intents.
- Cloudflare (hosting and CDN): serves the site and keeps server logs.
- Public Ethereum RPC providers (such as publicnode.com and sepolia.base.org): read payment transactions to verify them. They see transaction queries, not your identity.
- Public web sources: spot logos and metadata are pulled from public pages you link, exactly as any browser would.
Optional analytics (Google Analytics) load only if you opt in, and never before.
Storage and security
Data lives with the providers above over encrypted transport. The blockchain itself is public by design: a payment transaction permanently shows the wallet, amount, and destination, and nothing can un-publish it.
Your rights
You can ask for access, correction, export, or deletion of stored personal data at thawndev@gmail.com and get an answer within 30 days. Deleting a spot removes its display data from the board; on-chain payment records cannot be deleted. If you are in the EEA/UK, Brazil (LGPD), or California (CCPA/CPRA), you have the rights those laws grant, including opting out of any sale or sharing of personal information — which this service does not do.
Minors
The service is not for anyone under 18. If a minor’s data is found, it is deleted and the spot removed.
Changes
Material changes to this policy are announced on this page 15 days before they take force.