Privacy

What is stored

• Listings and bids. The link, the name, the description, the category, the amount and when it settled. All of it is public, and it is the board.
• One click counter per listing. A single integer that goes up. Not a row per click, not a time, not an address.
• Daily totals. Views and clicks per day, plus counts per browser, per operating system, per device type and per referrer. Each of those is its own counter that only ever goes up. They are never stored together, so no row exists that says one visitor used Firefox on Linux and came from Reddit. The same numbers are published at /stats.
• Invoices. A Monero subaddress, an amount, a status. No card, no processor, no email, no billing name.
• A hash of your claim token. SHA-256 only. It proves a token when you present one and cannot produce a token from a database dump.

What is not stored, and cannot be

• No accounts. There is nothing to register and nothing to log into.
• No cookies. Not for sessions, not for preferences. The theme lives in your browser's local storage, which never travels with a request. That is why there is no cookie banner: consent has nothing to ask about.
• No IP addresses. No table here has a column for one. The rate limiter keeps a keyed HMAC of the client address in memory under a salt generated at boot and rotated hourly, and it is never written to disk.
• No third-party scripts, fonts or images. The content security policy allows this origin and nothing else, so no analytics vendor, ad network or CDN can see you, even by mistake.
• No record of who clicked what. A directory of privacy tools knows something sensitive by nature: who is shopping for one. That dataset does not exist here to be handed to anybody.
• No GeoIP. Country data, if it is shown at all, comes from a header the front end supplies, and can be switched off entirely.

Icons and link previews

A listing shows its site's icon. This server fetches it once, when the bid settles, and stores the bytes here. Loading the board never makes your browser announce itself to a listed site. Typing a domain into the bid form asks this server to look at it, not your browser, so typing a competitor's domain into the box does not tell them you did.

What other people see

• Cloudflare. The clearnet site sits behind it for DDoS protection, and Cloudflare terminates TLS. It sees and logs every request to this domain: your address, the page, the time. We keep no such record. They do, under their own policy, and no promise made here reaches into their logs. The onion service reaches the same board without passing through them.
• Sites you click through to. Two things travel with you and both are the same for everybody: utm_source=xmrbid.lol on the link, and https://xmrbid.lol/ as the referrer. They exist so a listing can see what this board sent it. The referrer is cut to the domain on purpose: which page you were reading, and which category you were browsing, does not go with you. Beyond that they see whatever your browser normally sends, and that is a visit to them, not to us.
• A price feed. The server asks a public exchange for the XMR price every ten minutes, on a timer, carrying nothing. One request from the machine, not one per visitor.

Requests for data

We answer lawful orders the way anyone must, and the answer is constrained by what exists. There is no account, no address, no payment identity and no per-visit log, so the honest answer to most questions about a person is that the data was never created. What can be produced is what is already published on the board.

See the canary for what we say about orders we may not be able to describe.

Children

This is not a service for children, and there is nothing here for one. No age is collected because no personal data is collected.

Changes

This page changes when the software does, and the date at the bottom moves with it. There is no mailing list to notify because there are no email addresses.