Your pin is public.
Your card isn’t.

Confirmed winning pins display the label, public bidder name, chosen coordinates, country, and bid amount. Do not use personal or sensitive information you do not want made public. Labels do not accept links or markup.

The application stores location bids, payment identifiers, checkout state, and timestamps in PostgreSQL. Card and billing data are handled by Dodo Payments, not stored in this application database. Use the merchant support details on your Dodo receipt for payment assistance.

A keyed hash of your IP is used to rate-limit checkout requests. The application does not store your raw IP in its database; hosting providers may keep separate network logs. Theme preference is saved in your browser. The online badge counts anonymous browser sessions active within the last 60 seconds. A first-party, HttpOnly visitor cookie lasts up to 24 hours; only its hash and last heartbeat time are kept in PostgreSQL, and inactive presence records are removed on the next heartbeat. No third-party analytics tracker is installed.

World geometry and fonts are bundled locally. The map does not use a third-party tile service or ask for your device’s location. Coordinates are chosen manually on the map.

PostgreSQL is the application’s only database. Legacy directory, voting, custom-app, waitlist, and SQLite storage have been removed.

Before public launch, the operator must publish their identity, privacy contact, retention policy, and a working process for data requests and public-label moderation. These operator details are not configured in this preview.