Privacy & Data Policy

01. No Raw IP Storage

We do not store IP addresses. Unique daily visitors are calculated via a cryptographic hash:

dailySalt   = hmac_sha256(serverSecret, utcDate)
visitorHash = hmac_sha256(dailySalt, ip + userAgent)

The salt rotates every 24 hours UTC, so hashes cannot be joined across days to build browsing profiles or cross-site tracking histories. It is derived from a server-held secret rather than from the date alone, so the digests cannot be reversed by anyone who obtains the stored rows. If that secret is not configured, we record nothing rather than store a weaker digest.

02. Anonymous Checkout

Advertisers provide a destination URL and an email address for billing receipts. Placement metrics are published on the product’s permanent public stats page, whose URL is shown after checkout. No third-party trackers or cross-site tracking cookies are injected into listing cards.

03. Merchant of Record

Payments are processed by Dodo Payments Inc., which acts as the Merchant of Record handling global tax, VAT/GST compliance, and payment security.

04. Permanent Placement Records

Product stats pages survive the spots they describe. They are what makes the board’s published numbers checkable, so they are not removed on request — see section 05 of the Terms of Service.