Privacy

What we collect

• Your email address. For the receipt, the outbid notice, and the refund confirmation. It is the only way to reach you about your money.
• Your brand name and handle. Both are published — on the spot, in the live feed, on the winners page, and in the social posts. That is the point of bidding.
• The image you upload. Published the same way if your bid leads, and printed onto skin if it wins.
• Your IP address, in server logs. Used for rate limiting and to spot abuse, kept short-term, never published.
• A random id in your browser — the skinbid.bidderKey value in localStorage. It is a random string with no name attached, and it exists so the site can show you which bids are yours without making you create an account. There is also skinbid.pendingBid, a breadcrumb dropped just before the checkout redirect so a closed tab is not a lost bid.

Who else handles it

Four companies process data on our behalf. That is the complete list:

• Dodo Payments

  Takes the payment as Merchant of Record and issues refunds. Receives your email address and the bid amount. Holds the card details — we never do.

• Cloudflare R2

  Stores uploaded design files and the daily proof photos and video.

• Vercel

  Hosts this website and keeps short-lived request logs, which include IP addresses.

• Resend

  Sends the transactional email — receipts, outbid notices, refund confirmations.

We do not sell your data, we do not share it with advertisers, and we do not hand it to anyone not on that list unless the law requires it.

How long we keep it

• Bid and payment records — kept as long as tax and accounting law requires, typically seven years. These we cannot delete on request; they are the record that money moved.
• Uploaded designs that did not win — deleted 90 days after the round closes.
• Winning designs, and the photos and video of them being worn — kept and published indefinitely. They are the proof that we did what was paid for, and the licence you grant when you bid covers exactly this.
• Server logs — rotated within 30 days.

Seeing or deleting your data

Email hello@skinbid.tattoo from the address you bid with and we will send you everything we hold about you, or delete what we are allowed to delete, within 30 days. We reply to say we have received it within two business days.

Two honest limits: the tax records above have to stay, and a published photo of a worn design cannot be un-published retroactively.

Why there is no cookie banner

Because there is nothing to consent to. We set no cookies at all. The only thing this site stores in your browser is the two localStorage values above, both of which are strictly necessary to run a bid you asked us to run — no tracking, no advertising, no analytics, no third-party scripts reading them.

You can clear them at any time in your browser settings. If you do, the site simply stops recognising which bids were yours; your bids and your refunds are unaffected, because they live on our server keyed to your email.

Children

This site is not for anyone under 18 and we do not knowingly collect anything from a minor. If you believe a child has bid, tell us and we will delete the record and refund the payment in full.

Changes

If this policy changes materially we will update the date at the top and say what changed. Contact: hello@skinbid.tattoo.