Privacy Policy

What we collect

• The link, name, and one-liner you submit for a listing (this is displayed publicly on the board)
• Your bid amount, in SGD (displayed publicly)
• An email address, only if you choose to give one, used solely to notify you if you're outbid
• Click counts on your listing's outbound link (aggregate numbers only, not who clicked)
• Website analytics such as pages viewed, approximate location, device and browser type, referring page, and campaign parameters
• Standard technical logs (IP address, browser type) kept briefly for security and abuse prevention

What we don't collect

We never see or store your card details. Payments are processed entirely by Stripe; we only receive confirmation that a payment succeeded and the amount. We don't use advertising pixels or sell your browsing data. Google Analytics may use analytics cookies or similar identifiers to measure visits and navigation. Your dark/light mode preference is saved in your browser's local storage, not sent to us at all.

Who it's shared with

• Stripe, to process payment. See Stripe's own privacy policy for how they handle payment data.
• Upstash (Redis), our database host, which stores everything listed above.
• Vercel, which hosts the website and processes short-lived request and security logs.
• Cloudflare, which provides DNS and routes email sent to our privacy address.
• Google Analytics, which helps us understand visits, traffic sources, devices, and how people navigate the site.
• Google and DuckDuckGo's icon services, which receive the domain of the link you submit, in order to fetch its favicon for display.
• Resend, which sends outbid alerts only to people who provided an email.

We do not sell data, to anyone, ever. There's nothing to sell that isn't already public on the board.

How long we keep it

Listings and bid history are kept indefinitely, since the leaderboard and stats archive are the product. Email addresses are kept only as long as needed for outbid alerts, and deleted on request (see below). Analytics data is retained according to the retention settings configured in our Google Analytics property.

Your rights

You can ask us to delete your email address, or remove a listing entirely, at any time. Under Singapore's PDPA, you're entitled to access what we hold about you and to withdraw consent for its use. Reach out via the contact link below and we'll action it promptly.

Contact

Questions, deletion requests, or anything else: privacy@numberone.sg