Privacy Policy

Last updated: October 24, 2026

1. What we collect

  • Account: email address and authentication data via Supabase Auth.
  • ShopGoodwill credentials: username and password, stored encrypted at rest (AES-256-GCM) in our database. The decryption key is held on our bidding server. We do not display your password after save.
  • App data: watchlist items, max bids, favorites sync, sniper activity logs, and auction outcomes.
  • Billing: Stripe customer ID and payment method references. We never store full card numbers — Stripe does.
  • Acquisition: the first page you opened, the referring site, and campaign parameters on that link (such as utm_source). We save this with your account when you sign up.

2. How we use data

  • Operate the sniper, watchlist, and favorites tools
  • Place bids you schedule and check win/loss results
  • Charge success fees or subscriptions
  • Provide support and prevent abuse
  • See which pages and campaigns lead to signups

We do not sell your personal data. We do not use ShopGoodwill credentials for any purpose other than bidding and outcome checks you authorize by using the Service.

3. Processors

We rely on:

  • Supabase — authentication and database
  • Vercel — frontend hosting
  • Oracle Cloud — bidding/API servers
  • Stripe — payments

4. Retention

Account and billing records are kept while your account is active and as needed for accounting, fraud prevention, and legal compliance. Encrypted ShopGoodwill credentials are deleted when you disconnect them or delete your account from the Account page. You may also request account deletion by emailing support@buzzerbidder.com.

5. Security

Credentials are encrypted at rest with a key held on the bidding server. Access to production systems is restricted. No method of transmission or storage is 100% secure.

6. Cookies

We use session cookies for authentication (Supabase) and a first-party cookie named bb_acq that remembers your first visit for 90 days. Vercel Web Analytics counts page views, including referring site and rough location, without an advertising cookie. We do not use third-party advertising trackers.

7. Changes

We may update this policy by posting a new version here. Material changes will be noted by updating the date above.

8. Contact

Privacy questions: email support@buzzerbidder.com. See also our Terms of Service.

Back home