Privacy Policy
How Brand My Bag handles auction, payment, and website data
Information we collect
When you bid, we collect the brand name, work email, website, optional X handle, logo, requested amount, and Terms acceptance. We also record auction state, ranking timestamps, payment amounts and status, Stripe object identifiers, refund information, and transactional email delivery status.
Our infrastructure may process standard technical data such as IP address, request time, browser details, security signals, and error logs. We do not collect complete card numbers; payment details are entered directly on Stripe's hosted checkout.
How we use information
We use information to validate submissions, reconcile payments, calculate rankings, display eligible brands, serve logos, manage placements and refunds, send payment and private-link email, prevent abuse, provide support, and secure the service.
Brand name, website, optional X handle, logo, paid total, and rank are public. Work email, private management credentials, internal payment records, and webhook processing data are not returned by public APIs.
Service providers
Brand My Bag runs on Cloudflare Workers and uses Cloudflare D1 for application data, R2 for logos, and Cloudflare Email Service for transactional email. Stripe processes checkout, payment, and refund data under its own privacy terms. These providers may process data in other countries as needed to provide the service.
Retention and security
We retain auction and payment records as needed for ranking, reconciliation, fraud prevention, law, and support. Short-lived encrypted copies of private management links are deleted after delivery or expiry; the persistent credential is stored as a one-way hash. We use access controls and signed webhook verification, but no internet service can guarantee absolute security.
Your choices and contact
You may request correction of non-ranking brand details, rotation of a compromised link, or access to or deletion of personal data, subject to payment, fraud-prevention, recordkeeping, and legal requirements. Removing public brand material may end the associated placement.
Email support@brandmybag.net. We may verify that you control the work email or private link. We may update this policy when the service or providers change; the current effective date appears above.