Privacy.

Rebid is designed without user accounts and collects only what is needed to run payments, the public leaderboard, basic abuse controls, and first-party stats.

What we process

Submitted targets, extracted public metadata, bid totals, listing activity, and filtered click counts are public. We store internal Stripe object IDs and payment amounts for fulfillment and accounting. Stripe collects payment, billing, contact, and tax details; Rebid does not receive or store full card numbers.

Abuse prevention and stats

For rate limits, report deduplication, page views, and outbound clicks, the server combines network and browser signals into one-way rotating hashes. Raw IP addresses are not stored permanently. Aggregate counts are retained; short-lived deduplication records are routinely removed.

Providers and retention

Cloudflare hosts the application and database, and Stripe processes payments. Data may be handled where these providers operate. Financial and moderation records are retained as needed for accounting, disputes, safety, and legal obligations. We do not add invasive third-party analytics by default and do not sell personal data.

Your questions

To ask about privacy or a record connected to a payment, email support@rebid.lol with enough information to locate it safely.