Privacy Policy

Effective September 8, 2026. Last updated September 8, 2026.

This Privacy Policy explains how BidMyApp collects, uses, and shares information when you visit the board, list an app, pay to rank, or click through to a listing. It sits alongside our Rules.

Who is responsible

BidMyApp is operated as a small independent project. For privacy questions or requests, contact qanitech@gmail.com.

What we collect

We keep this small, only what's needed to run the board, take payment, and stop abuse.

• Live-presence cookie. An opaque random id in an HTTP-only cookie named bma_guest, stored for up to two years. It only powers the "X online" counter on the board. It isn't tied to a name, email, or account, and isn't used to profile you.
• Listing and payment data. The store link you submit, the category you choose, and the app's public name, icon, rating, developer and description, fetched live from Apple's or Google's own storefront the moment you list. Payment confirmation identifiers from Dodo Payments (checkout session id, payment id) are stored so your payment can be applied to the listing.
• Payment data. Card details and billing identity are collected entirely by Dodo Payments, our payment processor, never by us. We only receive confirmation that a payment succeeded and for how much.
• Install clicks. Each "GET" / "Install" click increments a plain counter on that app. No visitor identity or IP address is stored per click.
• Messages you send us. If you email us with a takedown request, a correction, or a privacy request, we keep that correspondence as needed to respond and to keep a record.

We don't run any analytics or ad-tracking scripts, and we don't have a newsletter or marketing emails.

Cookies

The bma_guest cookie is strictly necessary and powers the live visitor counter only. It is never used for advertising or cross-site tracking. No third-party ad or analytics cookies are set anywhere on the site.

Why we use this data

• Contract. To accept your payment, create or raise your listing, and show your rank on the board.
• Legitimate interests. Rate-limiting abuse, keeping the live board running, and defending against fraud or legal claims.
• Legal obligation. Keeping payment and accounting records where the law requires it.

Public listings

Rank, amount paid, app name, icon, rating, category and the store link are public on the board. Anyone can see them, including search engines. Don't list an app if you don't want its ranking and payment history shown publicly. We fetch an app's public listing details live from Apple's or Google's own storefront to display it. That lookup is an ordinary anonymous request, the same as any visitor loading that store page.

Who we share data with

• Dodo Payments processes every payment and acts as merchant of record.
• Apple and Google's public store APIs and listing pages are queried live to fetch app details. No personal data of yours is sent to them beyond the link you submitted.
• Neon (Postgres) and Vercel are our database and hosting infrastructure.
• Upstash is the Redis backend behind rate limiting and the live "online" counter.

We do not sell personal data. Some of these processors may operate outside your country. Where that applies, we rely on the safeguards those processors themselves provide.

How long we keep it

The presence cookie lasts up to two years, or until you clear your cookies. Listing and payment records are kept indefinitely: they're the leaderboard itself, and cumulative totals are permanent by design (see Rules). Payment identifiers are also kept as long as needed for accounting. Correspondence you send us is kept as long as needed to respond and to maintain a record.

Your rights

If GDPR or a similar law applies to you, you can ask us to access, correct, delete, or export personal data we hold about you, and to restrict or object to certain processing. Email qanitech@gmail.com; we may need enough detail to actually locate your data. Note that a listing's public details, already public on your own app's store page, aren't made private just by appearing on the board. You can ask us to remove the listing itself.

Children

BidMyApp isn't directed at children, and we don't knowingly collect personal data from them. If you believe a child has used the Service, contact us and we'll delete what we can identify.

Changes

We may update this policy as the product or the law changes. The date at the top of this page reflects the current version.