Privacy Policy

1. Information we collect

Account information

When you register, we collect your email address and the name you choose to provide. Our authentication service, Supabase, processes your sign-in credentials and keeps account identifiers, email confirmation information and authentication records to operate your account. If you contact us, we receive the information you include in your request.

Google Sign-In / OAuth

If you choose Sign in with Google when it is available, BIDQUIN may receive your name, email address, profile picture and Google account identifier, according to the permissions you grant. Google provides this basic profile information to our authentication service so we can identify you, create or access your BIDQUIN account and maintain your sign-in session. This information may be stored with your account in Supabase. A profile picture is not automatically published as a project logo.

Google Sign-In does not give BIDQUIN your Google password. BIDQUIN does not use this sign-in information to read Gmail messages, Google Drive files, contacts or calendars. We use Google account information for authentication and related account functionality, not for selling data or advertising profiles. You can review or revoke BIDQUIN's access in your Google Account connections. Revoking access does not by itself delete information already stored in your BIDQUIN account; you may separately request deletion.

Project and listing information

When you submit a project, we collect its name, website address, description, category and contact email, together with optional details such as a tagline, logo URL, creator name, social link and tags. We also keep listing status, publication dates, promotion history and account notifications.

Public listings may display the project details you submit, including creator information, website and social links, tags, rank and verified promotion amounts. Your account email and the private contact email field are not included in the public directory. Information you place inside a public description or other public field can be seen by visitors and search engines. Please avoid including private information in those fields.

Payment-related information

PayFast onboarding is pending and paid checkout is currently disabled. Where paid promotion is available, payments may be processed by third-party payment providers through their checkout services. BIDQUIN's payment records can include account and project identifiers, payment references, amounts, currency, conversion information, bid amounts, transaction status and refund-review information. We use these records to verify payments, apply eligible promotions, prevent duplicate processing and resolve payment issues.

BIDQUIN does not collect or store your full payment-card number, card security code, bank-login password or full bank credentials. Payment details entered into a provider's checkout are handled under that provider's privacy practices. A return to BIDQUIN after checkout does not by itself confirm payment.

2. How we use information

• Create and authenticate accounts, maintain sessions and send confirmation or password-recovery emails.
• Publish and manage project listings and calculate their public ranking.
• Show account notifications, project activity and listing performance.
• Verify promotion payments where available and maintain associated transaction records.
• Protect the service, enforce listing rules, investigate abuse and respond to support or privacy requests.

3. Cookies, sessions and browser storage

BIDQUIN uses browser session storage for authentication tokens and a randomly generated browser-session identifier used for the approximate online count. Signing out clears the stored BIDQUIN authentication session. Session storage is associated with your browser tab and may be restored by your browser's session-restoration features.

We use local storage to remember your light or dark theme preference. Clearing browser storage removes that preference and may sign you out. The current BIDQUIN application does not set advertising cookies. Authentication, hosting and payment providers may use their own necessary cookies or similar technologies on their services; their policies explain these uses.

4. Listing analytics and technical information

BIDQUIN records project impressions and website-link clicks to show listing performance. These records include the project identifier, event date and a salted, day-specific hash derived from an account identifier or network IP address where available, to reduce repeat counting. Raw IP addresses are not stored in the project impression and click tables. Counts are approximate and are not a guarantee of unique visitors.

The online indicator uses a random browser-session identifier and a last-seen timestamp. It counts recent active sessions; stale presence records are removed during subsequent presence updates. Hosting and authentication services may also process technical logs, such as IP addresses, request times, paths, browser or device information, authentication events and errors, for operation and security. The current application does not include Google Analytics or advertising tracking scripts.

5. Sharing and service providers

Information is shared as needed to provide the features you use. Supabase supports authentication and database storage; Vercel hosts the website and server endpoints; Resend supports authentication email delivery. Google processes Google Sign-In when you choose that option. Payment providers process checkout and payment verification when paid services are available.

Public project information is shared with visitors and may be indexed by search engines. Authorized administrators may access information needed for support, moderation, fraud prevention and payment review. We may disclose relevant information where required by law or reasonably necessary to protect users, investigate abuse or defend legal rights. BIDQUIN does not sell account or Google profile information. Providers may process information in countries different from your own.

6. Data security

We use HTTPS, authenticated access and database access controls to protect account and private project information. Sensitive server credentials are kept out of public browser code. Access is limited according to the functions being performed. No website, storage system or transmission method can guarantee absolute security. Keep your sign-in credentials private and sign out on shared devices.

7. Data retention

Account and project information is retained while needed to operate your account and listings. Transaction, security and support records may be retained for fraud prevention, resolving disputes, accounting or applicable legal requirements. Retention varies by record type and service provider; BIDQUIN does not currently apply one fixed deletion period to all records.

When a deletion request is fulfilled, information is deleted or de-identified where appropriate, except for records that need to be retained for the purposes above. Backup copies and provider logs may remain until their retention cycles expire. Removing a public listing cannot immediately remove copies previously indexed or saved by third parties.

8. Your choices and data deletion requests

You can edit your project details through your account where editing is available, sign out, clear browser storage and revoke Google access through your Google Account. You may also request access to, correction of or deletion of your account and personal information. Depending on your location, applicable law may provide additional rights, such as restricting processing, objecting to certain uses or receiving a copy of your information.

Use the contact section below for account or data requests. We may ask for reasonable verification of account ownership before acting, to protect you against unauthorized changes. Do not send passwords, authentication tokens or full payment details. Some requests may be limited by legal obligations, security needs or unresolved transactions. Deleting a BIDQUIN account does not delete your Google account.

9. Third-party services and links

Project websites, externally hosted logos, Google and payment checkout services operate under their own privacy policies. Loading an external image or following a link can disclose technical information, such as your IP address, to that service. BIDQUIN does not control how independent project websites handle your information.

Provider policies: Supabase, Vercel, Resend and Google. Review the policy presented by your payment provider before checkout.

10. Children's privacy

BIDQUIN is intended for people discovering and publishing projects, not for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

11. Changes to this policy

We may update this policy as BIDQUIN's features or data practices change. The current version will remain available on this page, with the updated date shown above. Where required, we will provide additional notice of material changes.

12. Contact and privacy requests

For privacy questions or account/data deletion requests, email BIDQUIN at noreply@bidquin.lol. Include the email address associated with your account and a description of your request. Never include your password, sign-in tokens or full payment credentials.