Privacy Policy

Effective August 29, 2026. Last updated August 29, 2026.

This Privacy Policy explains how animalbid.lol ("we", "us", "our") collects, uses, and shares information when you visit the site, create a listing, buy a sponsor slot, or pay through checkout. It works together with our Terms of Service and Rules.

We are based in France. If you are in the European Economic Area or the United Kingdom, we process personal data under the GDPR and, where it applies, the UK GDPR.

Who is responsible

The controller is Kalo, an individual operating animalbid.lol from France. Contact: @kalo_devv on X.

Payments are processed by Stripe, not by us. Stripe is an independent controller or processor of the card and billing data you enter on their hosted checkout page. See Stripe's privacy policy.

What we collect

Listings. Pet name, species, photo, optional tagline, optional X and Instagram handles, rank, bid amount, like and click counts, and when the bid was placed. This is published on the public board and listing pages.

Sponsor slots. Company name, pitch, website, and slot period. This is published in the advertising rails.

Checkout email. Optional email so Stripe can send a receipt. We may store it on the unpaid claim until payment completes. We do not use it for marketing.

Payments. We never see or store full card numbers. Stripe tells us that a session was paid, the amount (before tax), and identifiers we need to place the listing (claim id, pet name or company).

Presence. A random session id in your browser (localStorage) so we can count unique visitors and who is online. We do not use it to identify you by name. The live banner may add a cosmetic floor on top of real counts.

Technical logs and errors. IP address (for rate limiting), user agent, and crash reports via Sentry so we can keep the Service working. Photo uploads may be checked by Sightengine for NSFW or human-face content; we send the image for scoring, not your name.

Theme. Light/dark preference stored in your browser by the theme switcher.

We do not ask for health data, payment passwords, or government ID on this site.

Why we use it (legal bases)

  • Contract. To take payment, place or raise a listing or sponsor slot, show the board, and honor the Terms you agreed to at checkout.
  • Legitimate interests. To prevent abuse, moderate photos, count visitors, debug errors, and keep the Service secure. We balance that against your rights.
  • Legal obligation. To keep records of paid transactions for accounting and tax as French law requires.
  • Consent. Optional email at checkout; you can leave it blank. You can also refuse cookies that are not strictly necessary — we do not run advertising or cross-site tracking cookies.

Who we share it with

We share data only as needed to run the Service:

  • Stripe — checkout and payment confirmation (United States / EU with appropriate safeguards).
  • Supabase (Postgres and Storage) — listings, claims, visitor heartbeats, and pet photos.
  • Sightengine — automated photo moderation.
  • Sentry — error reports.
  • Hosting (Vercel) — serving the site.

Public listings are visible to anyone, including search engines and crawlers. We do not sell personal data.

How long we keep it

Public listings stay on the board until they are outranked in the usual way or we remove them. Photos stay with the listing. Paid-claim records are kept as long as needed for accounting (typically several years under French commercial rules). Visitor session ids are short-lived operational data. Error logs are kept only as long as useful for debugging.

Cookies and similar storage

We use strictly necessary storage: a random visitor session id and your theme preference. We do not use advertising cookies or sell browsing data. Stripe's hosted checkout page may set its own cookies; those are governed by Stripe.

Your rights

If GDPR applies to you, you can ask to access, correct, delete, or export your personal data, restrict or object to certain processing, and withdraw consent where processing is based on consent. Contact @kalo_devv. We will respond within one month where the law requires it.

Public board content (name, photo, rank) is the product you paid to publish. Deleting a listing does not refund the payment. You may also lodge a complaint with the CNIL in France (cnil.fr) or your local supervisory authority.

Children

The Service is for people 18 and over. We do not knowingly collect personal data from children. If you believe a listing involves a minor's personal data in a way that should come down, contact us.

International transfers

Some processors (including Stripe, hosting, and error reporting) may process data outside the EEA. Where that happens, they rely on adequacy decisions or Standard Contractual Clauses or similar safeguards.

Changes

We may update this policy. The date at the top will change. Material changes will appear on this page. Continued use after a change means you accept the updated policy.

Contact

Questions about privacy: @kalo_devv on X.