Privacy

• Your email address, to sign you in and tell you what happened to your bid.
• Your country. Required, because it decides which items can ship to you, and therefore whether you may bid at all.
• An age band and gender, both optional. Leaving them blank changes nothing about how the site works for you.
• Your bid amounts, when you placed them, and whether you revised them.
• Your IP address, device type and referring page when you visit.
• Payment details are handled by Stripe. We never see or store your card number — only a fingerprint Stripe returns, used to stop one person opening several accounts.

Never you.

A seller receives aggregates: the distribution of bid amounts, a demand curve, where traffic came from, and groupings by age and gender. Any grouping with fewer than 10 people is dropped entirely.

The optional "why this price" note is de-identified and clustered by theme; example lines only appear once a theme has enough of them.

• After a reveal: the clearing price, the number of bidders, the gap to second place and the distribution of bids.
• Each bid’s commitment hash is published the moment it is placed, and its salt and amount after the reveal, so anyone can recompute the list.
• Bidder identities are never published. The bidder id inside the hash is not released.
• Seller bids for tomorrow’s slot are public as amounts, rank and brand, with a link to the brand’s site — that placement is what the bid buys. This concerns sellers only; it says nothing about buyers.

• Account details, until you ask us to delete them.
• Payment authorisations are held by Stripe for up to 7 days; losing authorisations are released at the reveal.
• Order and appeal records are kept as evidence for payment disputes.
• Visit logs feed the seller report in aggregate and are not kept as identifiable records beyond that.

You can ask to see, correct, export or delete what we hold about you, and withdraw the optional age and gender fields at any time. Email the address below; we will act within 30 days.

Deleting your account removes your bid records. Past clearing prices and distributions stay up as public record, but they carry no identity.

privacy@unseal.online