Information we collect
When you create an account, we collect your email address and a one-way hash of your password. We do not store your readable password. When you submit or manage a project, we may collect its name, URL, tagline, description, icon, maker name, bid amount, submission time, owner account, arena, and moderation status.
When you create or manage an arena, we may collect its name, slug, description, visibility, owner account, status, and a one-way hash of any private access code. We may also process sign-in state, private-arena unlock state, security and moderation records, and basic technical request information needed to operate and protect the service.
Our self-hosted Umami analytics records page paths without search parameters, page titles, referrers, hostname, browser language, screen size, browser, operating system, device type, approximate country, anonymous session information, and selected interaction events. Event metadata is limited to non-sensitive context such as the button location and public project or arena slug. We do not intentionally send passwords, access codes, account emails, contact-message contents, or other form values to analytics.
The contact form asks for your name, email address, subject, and message. When you submit it, those details are sent through Resend and delivered to the Outbid team so we can handle your enquiry. For paid bids, we keep order, amount, currency, Stripe transaction identifiers, payment status, refund, dispute, and fulfilment records. Stripe collects payment details on its hosted checkout; Outbid does not store complete card numbers.
How we use information
We use information to create and secure accounts; publish and rank eligible projects within each permanent leaderboard; let owners edit projects and manage their entries; create public, unlisted, and private arenas; enforce access and moderation settings; prevent abuse; investigate technical or security problems; administer the service; and respond to enquiries.
We use aggregated or de-identified analytics to understand traffic, feature use, competition entry funnels, and interface performance so we can improve Outbid. We do not sell personal information or use analytics for advertising.
Legal bases for processing
Where UK data-protection law applies, we process information as necessary to provide the service and perform our agreement with you; to meet legal obligations; for legitimate interests such as operating, securing, moderating, measuring, and improving Outbid, where those interests are not overridden by your rights; and, where required, with your consent. You may withdraw consent at any time without affecting earlier lawful processing.
Information other people can see
Project names, URLs, taglines, descriptions, icons, maker names, bid amounts, ranks, and arena membership may be visible to anyone who can access the relevant leaderboard. Public arenas may appear in discovery. Unlisted arenas can be visited by anyone with the URL. Private arenas use a shared code that recipients can forward, so they must not be treated as secure storage for confidential or sensitive information.
Your account email, password hash, private-access-code hash, private session state, and non-public moderation information are not intentionally displayed on leaderboards.
How long we keep information
We retain account and current project or arena information while it is needed to provide the service. Contact messages may remain in our shared inbox and Resend delivery records while reasonably needed to answer the enquiry, keep support history, prevent abuse, or meet legal obligations. Bid, ranking, moderation, support, transaction, security, and analytics history may be retained for longer where reasonably needed for results, audit, dispute, fraud-prevention, safety, service measurement, or legal purposes. We periodically review analytics retention. When information is no longer needed, we will delete or de-identify it, subject to backups and legal requirements.
Your privacy rights
Depending on where you live, you may have rights to ask for access to, correction of, deletion of, restriction of, or portability of your personal information, or to object to certain processing. You may also complain to a supervisory authority. In the UK, this is the Information Commissioner’s Office.
To make a request, use the contact page or email team@outbid.ly. We may need to verify your identity before acting on a request.
Privacy-friendly analytics
We use self-hosted Umami to measure pageviews and selected actions such as starting a bid, opening an arena, viewing a project, submitting a form, or using moderation controls. Umami does not set analytics cookies, build cross-site advertising profiles, or receive the contents of the forms you complete. It processes technical request data including the IP address and user agent to produce anonymous session and location information; Outbid does not use Umami’s distinct-ID feature to connect analytics to your account.
The tracker excludes URL search parameters and is configured to respect your browser’s Do Not Track setting. You can also prevent analytics requests by blocking actions.outbid.ly in your browser or content blocker. Blocking analytics does not stop the core Outbid service from working.
Children
Outbid is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information to us, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this policy as Outbid changes or legal requirements develop. The date above shows the latest revision. If a change materially affects how we use existing personal information, we will take reasonable steps to provide notice.
Contact us
Privacy enquiries: team@outbid.ly.
Telephone: +44 122 363 6806.
Future Version Limited, company number 11739018.
The Station House, 15 Station Road, St. Ives, Cambs, PE27 5BH, United Kingdom.