Privacy policy.
Who we are
creatorbid is operated by [YOUR NAME / COMPANY], based in Spain. Data controller contact: [CONTACT EMAIL].
What we collect (and why)
Account data — name, email and a hashed password (or your Google/X account id if you sign in with them). Legal basis: performing the contract with you.
Payments — handled entirely by Stripe. We never see or store card numbers; we keep the amount, the checkout reference and the payer email (so you can claim your profile). Legal basis: contract and legal obligations.
Creator profiles — handle, avatar, bids, clicks and featured content are the product and are public by design.
Anonymous visitor hashes — for click counting, the “online” counter and abuse prevention we hash your IP and browser with a salt that rotates daily. The hash can't be reversed into your IP and expires quickly. Legal basis: legitimate interest.
Analytics — cookieless and aggregated (see the cookies page). No advertising profiles, no cross-site tracking.
Who processes it
Stripe (payments), Turso (database), Vercel (hosting and cookieless analytics), Google and X (optional sign-in), YouTube and Twitch APIs (profile detection) and Resend (transactional email). Each under their own data processing agreements. We never sell your data.
Retention
Account data until you delete your account. Payment records for as long as tax law requires. Presence hashes expire in minutes; click hashes rotate daily.
Your rights (GDPR)
Access, rectification, erasure, portability, restriction and objection: email [CONTACT EMAIL]. You can also complain to the Spanish supervisory authority, the AEPD (aepd.es).