Privacy Policy

The controller for personal data processed through the Service is unknowncoderdev@outlook.com, based in USA.

• Email: unknowncoderdev@outlook.com
• X: @UnknowncoderDev

We keep the Service lean and privacy-first. We collect only what we need to maintain the leaderboard, process payments, prevent fraud, and secure the platform.

• Visitor identifier. A pseudonymous ID in an HTTP-only cookie named xbids-visitor-id, stored for up to one year. We use it to link checkout sessions, prevent duplicate fraudulent clicks, and preserve board integrity.
• Checkout and listing data. The X @handle you submit, category, bid amount, and public profile attributes (name, avatar, bio, follower count). Payment reference tokens are stored to verify and allocate your rank.
• Payment data. Payment processing is handled entirely by Dodo Payments. Full card numbers, security codes, and bank details never touch or remain on XBids servers. See Dodo Payments' Privacy Policy.
• Public X profile data. When a handle is entered, we fetch publicly visible metadata (avatar, bio, followers, verification mark). We never ask for your password or OAuth account access.
• Clicks. When users click through to an X profile from the leaderboard, we record the listing ID, timestamp, and a hashed IP address strictly for rate limiting and bot-click prevention.
• Technical data. Standard HTTP request data such as user agent, referrer, and network metrics to protect against DDoS and server outages.
• Correspondence. If you email us regarding listing management or privacy, we retain that communication to resolve your inquiry and maintain an audit trail.

The visitor identifier cookie is a strictly necessary cookie. It enables secure checkout completion, prevents automated click spoofing, and keeps ranking states consistent. We do not use third-party tracking cookies or sell ad targeting cookies.

Your device may store your theme preference locally (dark or light mode) to render the UI according to your choice.

• Contract performance. To fulfill your bid, calculate leaderboard standings, credit top-ups, and deliver the paid visibility service requested.
• Legitimate interests. To safeguard the leaderboard from fraud, apply rate limits, measure aggregate engagement, and defend legal claims.
• Legal obligation. To maintain accounting and tax records required by governing authorities.

Rank, cumulative spend, X @handles, avatars, bios, and follower counts displayed on the leaderboard are public. Anyone browsing the web or search indexing engines can view them. Do not submit an account if you do not want public visibility on the board.

• We do NOT require your X password or OAuth account access.
• We do NOT post, repost, follow, message, or execute actions on your X account.
• We only display information already publicly accessible on X.
• We do NOT sell, rent, or trade your personal data to third-party advertisers.

• Dodo Payments — for payment processing, settlement, and fraud protection.
• Infrastructure — Vercel and Supabase / PostgreSQL for high-speed edge hosting and database security.
• Authorities or Legal Advisors — strictly if required by lawful court order, subpoena, or to defend legal rights.

• Visitor identifier cookies persist for up to 1 year or until cleared by your browser.
• Public leaderboard entries remain active while the listing is on the board.
• Payment transaction IDs and cumulative spend records are kept for statutory accounting and dispute periods.
• Public profile snapshots are cached and periodically refreshed to reflect current handles.

Under the GDPR, CCPA, and similar privacy regulations, you have the right to access, rectify, delete, or export personal data we hold about you, or object to certain processing.

To make a request, contact unknowncoderdev@outlook.com. Public ranking information that mirrors your own public X account is not confidential; however, you may request listing removal.

The Service is intended for adults aged 18 and older. We do not knowingly collect personal information from minors. If you believe a minor's account has been submitted without consent, contact us immediately for removal.

We may periodically update this policy. When updates occur, the revised date at the top of this page will be updated. Continued use of the Service signifies agreement to the current Privacy Policy.