Privacy Policy

dibbzr collects the minimum it needs to run honest auctions. This page says exactly what that is, where it lives, and what your rights are.

What we collect

• Bidders: your email address (for sign-in codes and auction notifications), your bids (amount, the name or message you want placed, any link you submit), and a Stripe customer reference. Your card details are held by Stripe — they never touch our servers.
• Creators: your surface's name, contact email, auction settings, and any cause pledge you choose to display.
• Everyone: an operational event log (bids placed, holds released, emails sent, link clicks on tracked auction links) used to run and debug the Service, and a session cookie for sign-in. Your theme preference is stored in your own browser. We run no advertising trackers and no third-party analytics.
• Waitlists: if you join one, the email you gave and which surfaces interest you.

What's public by design

Auctions are public spectacles on purpose: the current top bid, bid history amounts, the winning name/message (that's the product — it gets published in the creator's title, pin, or stream), and cleared prices. Don't put anything in a bid you don't want printed in public.

Who processes it

Supabase (database and authentication), Stripe (payments), Resend (email), and Vercel (hosting). Each receives only what it needs for its job. We don't sell or rent personal data to anyone.

Retention and your rights

We keep auction and payment records as long as needed for disputes, refunds, and legal obligations. You can ask us to delete your account data or export what we hold about you — email auctions@dibbzr.com from the address in question. Note that already-published placements (a name in an episode title, a pinned comment) live on the creator's platform and are theirs to manage.

Changes

If this policy changes materially, the date above changes with it. Continued use after changes is acceptance.