Privacy Policy

buyyourspot.com

Privacy Policy

Last updated 22 August 2026

buyyourspot.com is operated by Akash Yadav, a sole proprietorship in Uttar Pradesh, India. This page describes exactly what the site collects and why. There are no cookies, no advertising trackers, and we never store your IP address.

If you never buy anything

  • No account, no cookie and no sign-up. You can read the whole board without giving us anything.
  • We count visitors without identifying them. Your IP address and browser user-agent are combined with a secret and a daily-rotating salt, hashed, and only the hash is stored. The raw IP is never written to disk, and because the salt rotates every day the same visitor cannot be linked across days.
  • Those presence records are deleted automatically after 48 hours. They exist only to produce the visitor number in the header.
  • When you click a listing, we record that a click happened and the time — attached to the listing, not to you. No visitor identifier is stored with it. Those records are deleted after 7 days.
  • Site favicons are fetched by our own server, not your browser, so the third party serving them never sees your IP address or which listings you looked at.

If you buy a listing

  • Payment is handled by Dodo Payments as Merchant of Record. Your card details go to them and never reach us — we do not see, receive or store them. Their privacy policy covers that part of the transaction.
  • From the completed payment we receive and store: your email address, the payment's identifier, the amount you bid and the amount actually settled. That is all.
  • We store the listing itself — the URL or handle you submitted, its display name, an optional description and image, its current bid, and its click count. This is public by design; that is the product.
  • We store a random edit token for your listing. It is the credential in your edit link and is never shown on any public page.
  • We keep the payment record permanently. It is an accounting record of money received and we are required to be able to account for it.

Email

  • Your email address is used to send you the edit link for your listing, to re-send it if you request recovery, and to reply if you contact us. It is not used for marketing and there is no mailing list.
  • Transactional email is sent through ZeptoMail (Zoho). The message carries no tracking pixel and no click-wrapping — deliberately, because the edit link inside it is a credential.
  • Recovery emails are always sent to the address stored on the listing, never to an address typed into the form, so the form cannot be used to redirect someone else's credential.

Analytics

  • We use Sleek (getsleek.io) for page analytics. It is cookieless and we do not enable any identifying feature, so no consent banner is required and none is shown.
  • Analytics tells us how many people visited which pages. It is not used to build a profile of you, and we do not sell or share it.
  • The visitor number in the header does not come from analytics — it comes from our own database, as described above, so it keeps working even if you block the script.

Who else sees your data

  • Dodo Payments — payment processing and tax, as Merchant of Record.
  • Neon — the database host where listings and payment records are stored.
  • Vercel — the hosting platform serving the site.
  • ZeptoMail (Zoho) — transactional email delivery.
  • Sleek — page analytics.
  • Nobody else. We do not sell personal data, share it with advertisers, or use it for advertising of any kind.

Your rights

  • You can ask what we hold about you, ask for it to be corrected, or ask us to delete it. Email hello@buyyourspot.com from the address you paid with.
  • You can edit or remove your listing yourself at any time using your edit link.
  • Deleting a listing removes it from the board. We keep the underlying payment record, because we cannot delete an accounting record of money we received — but it can be disassociated from your email address on request.
  • If you think we have handled your data wrongly, tell us first and we will try to fix it. You also have the right to complain to the data protection authority in Uttar Pradesh, India.

Changes