Your pin is public.
Your card isn’t.
This policy explains what the map publishes, what the service stores, how moderation reports are handled, and how to request help.
Public placement data
Confirmed placements may publicly display the bidder name, label, country, fixed coordinates, amount, status, and share badge. Do not submit personal or sensitive information you do not want published.
Payment and database data
PostgreSQL stores bid IDs, public placement fields, checkout-session and payment references, amount, status, tax fields, and timestamps. Dodo processes card and billing details; BidWars does not store complete card data.
Security and abuse prevention
A keyed hash derived from network information may be used for rate limiting; the application does not store the raw IP in its database. Hosting and payment providers may maintain their own security logs. Restricted roles, encrypted connections, validation, and duplicate-event controls protect the service.
Presence, browser, and analytics data
An HttpOnly visitor token may last up to 24 hours. Its hash and latest heartbeat support the online count; inactive presence records are removed during subsequent heartbeat cleanup. Theme preference stays in the browser. Microsoft Clarity and Google Analytics may collect behavioral analytics such as page views, page interactions, heatmaps, session replay signals, browser details, and approximate usage data to improve the site.
Moderation reports
Reports sent to support@bidwars.wtf may contain reporter contact details, links, screenshots, rights documentation, and investigation notes. Use only the information needed to explain the violation. Reports are used to investigate, prevent abuse, enforce the rules, protect rights, and meet legal or payment-provider duties.
Sharing and disclosure
Data may be shared with Dodo, Microsoft Clarity, Google Analytics, hosting and database providers as needed to operate, analyze, and improve the service. Relevant information may also be disclosed to advisers, rights holders, payment partners, or authorities when reasonably necessary for fraud prevention, disputes, legal compliance, or safety.
Retention
Bid and payment-reference records are retained as needed for rankings, payment reconciliation, fraud prevention, disputes, accounting, and legal obligations. Moderation records are retained while a matter is active and afterward when reasonably necessary to document enforcement or recurring abuse.
Requests and corrections
To request access, correction, deletion, or review of public content, email support@bidwars.wtf with enough information to locate the record. Identity or authorization may be verified before action. Some financial, security, dispute, and legal records cannot be deleted immediately.
Email support@bidwars.wtf. Include the relevant country, bidder name, bid ID or link, your request, and supporting evidence. Avoid sending passwords, full card numbers, government IDs, or unrelated sensitive information.