Last updated: 21 August 2026
PRIVACY
We collect the minimum needed to charge, rank, and protect the board. Profiles and their totals are public by design.
1. Controller
The data controller is Emilio, with a contact address in Oviedo, Spain. For privacy or rights requests, email viralbidlol@gmail.com.
2. Data we process
We store the selected platform, normalized public profile URL, handle, display name, slug, paid total, timestamps, moderation state, and identifiers and status for Stripe sessions, payments, and events. For security and rate limits, we may process technical logs, an IP address or hashed representation, basic headers, errors, and timestamps.
3. Data we do not store
Stripe collects and processes card and other financial details. ViralBid does not receive or store full card numbers, CVCs, or bank credentials. We also do not require a user account to take part in the board.
4. Purposes and legal bases
We process data to validate profiles, create Checkout, confirm payments, calculate and publish rank, prevent duplicates and fraud, enforce limits, moderate content, provide support, and meet legal duties. Applicable bases may include performing the requested service, our legitimate interest in operating and protecting ViralBid, and legal compliance.
5. Public information
The URL, platform, handle, display name, paid total, rank, and ranking-related dates are deliberately public. Do not submit information you do not want published. Hiding a profile does not require deletion of accounting or fraud-prevention records we must retain.
6. Providers and analytics
Supabase hosts the database; Stripe processes payments; Vercel hosts and delivers the application. We use cookie-free Vercel Web Analytics to measure aggregate visits, pages, approximate referral source, and browser characteristics. These providers process data under their own contracts and policies. We do not sell personal data or use advertising trackers.
7. Cookies and local storage
Vercel Web Analytics does not use cookies. We use a functional preference to remember language. The private console may use an admin-session cookie. Stripe may use its own technologies during Checkout for security and fraud prevention. ViralBid does not set advertising cookies.
8. Retention
Applied profiles and payment records are kept while the board operates and afterward as needed for accounting, fraud prevention, disputes, and legal duties. Payment attempts and technical events may be retained for a period proportionate to security and support. Exact schedules will be finalized with the operator's legal and tax advice.
9. Your rights
Depending on location, you may request access, correction, deletion, restriction, objection, or portability and complain to your data-protection authority. We will verify identity and respond as law requires. Some records may be retained where a legal duty or legal claim applies.
10. Security, transfers, and children
We use access controls, validation, signed webhooks, and database restrictions, but no system is infallible. Providers may process data outside your country using appropriate legal mechanisms. ViralBid is not directed to anyone under 18; tell us if you believe a minor submitted data.