Privacy

Payment. Stripe charges the bid. Stripe processes the payment method, amount, date and, if checkout asks for it, email or billing details. Legal basis: performing the contract. Pedestal does not store the card.

Public board. We store the destination id, the amount paid, the date, outbound click counts, and the listing (name, icon, copy). Anyone who opens the site can see it. Legal basis: the contract you request by paying, and the fact that the ranking is public by design.

Stats. We count board loads and outbound clicks on the server, by the hour, with no cookie and no profile. We do not know who you are. Legal basis: legitimate interest in seeing whether the game is used.

Technical logs. Hosting (Vercel) may briefly store IP, browser and URL, for security and to make the site work. Legal basis: legitimate interest.

Pedestal does not use analytics or advertising cookies. There is no banner because there are no first-party tracking cookies.

When you pay, Stripe may set cookies on its own checkout, which are needed to take the payment. That happens on Stripe's domain and follows Stripe's policy.

Stripe: payments. Vercel: hosting. Supabase: the board and the counters. Apple: a public lookup of the app listing (iTunes Lookup). Pedestal does not send Apple your identity. DuckDuckGo: favicons for generic links. Pedestal asks for the icon by the listing's public domain, not who you are.

Some of these providers sit outside the European Economic Area. Transfers use standard contractual clauses or other safeguards they publish.

The listing and the amount stay while the board exists, because the historical ranking is the product. Load and click counters are stored by the hour. Technical logs follow the host's cycle, usually days or a few weeks.

If you ask me to take your app off the board, I will, unless the law requires keeping it (an invoice or a payment dispute, for example).

You can ask for access, correction, deletion, restriction, objection and portability. Email mikeldewi@icloud.com. You can also complain to the Spanish Data Protection Agency (aepd.es).

There is no automated decision that produces legal effects about you. Board order is the amount you paid, and that amount is public.