Privacy policy
Last updated: August 21, 2026
The short version
No accounts, no tracking cookies from us, and payment card details never touch our servers. What you put on the grid is public by design — that's the product.
What we collect from buyers
Your email address, your link URL, your hover text, your uploaded image, and the purchase details (position, size, amount, timestamps). Card and payment data are handled entirely by Stripe under Stripe's own privacy policy.
What's public by design
Your image, link, hover text, spot size, amount paid, and click counts appear publicly on the grid, the leaderboard, and your spot's public stats page. Your email address is never shown publicly.
What we collect from visitors
Anonymous counters: page visits, clicks on grid spots, and how many people are on the site right now. These are plain counts — we don't set cookies or build visitor profiles. Standard server logs exist briefly for operations and security.
Analytics
We use DataFast, a cookieless analytics service, to understand traffic in aggregate (pages, referrers, countries, devices) — including requests from search-engine and AI crawlers. Its numbers are aggregate, not personal profiles.
We email buyers about their own purchase only: receipts (sent by Stripe), going live, and any problem with the purchase. No marketing email, no newsletters, no sharing your address.
Who we share data with
Only the services that run the site: AWS (hosting and storage), Stripe (payments), and DataFast (aggregate analytics). We don't sell or rent any data to anyone.
Where data lives
The site runs on AWS in the United States, so data is processed and stored in the US. If you visit or buy from elsewhere (including the EU or UK), your data travels to the US; by using the site you're okay with that, and buyers' data is processed because it's needed to deliver what you bought.
Cookies
We set no cookies. Stripe's checkout page (on Stripe's own domain) may use cookies for fraud prevention under Stripe's policies — that happens on their site, not ours.
Children
The site isn't directed at children under 13 and we don't knowingly collect their information. Purchases require being an adult.
Security
Uploads and purchase records live in access-controlled storage; payment data never touches us at all. No system is perfectly secure, but the attack surface here is deliberately tiny.
Your rights
Wherever you live, we honor the spirit of the strong versions: ask us what we hold about you, ask us to correct it, or ask us to delete what we're not legally required to keep — by email, no forms, no fee. We don't sell or share personal information for advertising, so there's nothing to opt out of.
Retention and contact
Purchase records are kept while your spot exists and as bookkeeping requires. To change or remove your content, or ask about your data, email udayveer.nyc@gmail.com — one person reads it, and it's the same address for everything. We may update this policy; the date above always reflects the latest version.