SnapBid
Privacy Policy
This policy explains what personal data SnapBid collects, why, how long it's kept, who it's shared with and what your rights are. We collect only what SnapBid needs to work, keep it safe, and get paid.
1. Who is responsible
SnapBid is responsible for your data. For questions about your data or to use your rights, contact us.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: your username, your password (stored only as a salted hash, never readable), when you signed up and last signed in, when you accepted these policies. | To give you an account and let you sign in. | Contract |
| Eldorado connection: your Eldorado session cookies (stored encrypted), your Eldorado user ID and username, the games and categories you're subscribed to. We never see or store your Eldorado password. | So SnapBid can read your boosting requests and send messages and offers for you. | Contract |
| Your settings: messages, prices, delivery times, filters. | To run SnapBid the way you set it up. | Contract |
| Activity: the requests SnapBid handled for you: buyer usernames, game, category, the buyer's answers on the request, prices and delivery times offered, and whether a message or offer was sent, skipped or failed. | To run the service, avoid sending twice, and show you your activity. | Contract |
| Payments: the pass and amount, Stripe Checkout/session/payment identifiers and payment status, or the chosen coin, deposit address and blockchain transaction IDs; plus your credit balance. SnapBid never receives your full card or bank-account details. | To take payment, prevent duplicate activation, add your pass and keep required financial records. | Contract; legal obligation (bookkeeping) |
| Website visits: the page opened, your country, whether you use a phone or a computer, the website or link that sent you, and a coded visitor ID used to count each visitor once a day. We don't store your IP address for this: the visitor ID is a one-way code made from your connection and browser, which can't be turned back into your IP. We don't record your city, internet provider, language or which account you're signed in to. | To understand how many people visit and where they come from. | Legitimate interest |
| Security: counters of wrong passwords and sign-ups per IP address and per username, kept for a short time; technical logs. | To stop password guessing, spam sign-ups and abuse. | Legitimate interest |
We don't use your data for advertising, don't sell it, and don't build profiles about you.
3. Data about buyers
When SnapBid works on your Eldorado account it processes information about your buyers (their Eldorado usernames and what they wrote in their requests). We use it only to send the messages and offers you set up and to show you your activity, on your behalf. You're responsible for using SnapBid in line with Eldorado's rules and the law.
4. Cookies and similar storage
SnapBid uses only cookies that are needed for it to work. There are no advertising or tracking cookies, so there's no cookie banner.
- snapbid_session: keeps you signed in (up to 30 days). Only a coded version is stored on our side.
- snapbid_device: remembers that this browser has signed in to your account before, so someone who keeps typing wrong passwords for your username can't lock you out (up to 1 year).
- Your browser's session storage briefly remembers the plan and payment route you picked on the home page, until you finish paying.
5. Who we share data with
We use these services to run SnapBid. They only get what they need:
- Cloudflare (hosting, database, security, logs): runs SnapBid and stores its data. Cloudflare processes connection data such as IP addresses to deliver and protect the site.
- Stripe (payment processing): hosts Checkout and processes eligible card, wallet, bank and local payment methods. Stripe receives the payment and device information needed to prevent fraud and complete the payment; its own privacy notice applies.
- Eldorado.gg: SnapBid sends requests to Eldorado using your Eldorado session to read your requests and send messages and offers. Game and rank pictures in your dashboard load from Eldorado's image server, which sees your IP address when your browser loads them.
- TalkJS: the chat service Eldorado uses; chat messages SnapBid sends for you pass through it.
- Discord: we receive notifications about the service in our own private Discord server: new accounts and sign-ins (username only), Eldorado connections, orders and payments, and new website visitors (country, page, phone or computer, and the site that sent them).
- Google Fonts: the website's fonts load from Google, which sees your IP address when your browser loads them.
- Blockchain services (Blockstream, litecoinspace.org, TronGrid, Solana RPC providers): we look up payments to your deposit address. We send them addresses and transaction IDs, not your name or account. Blockchain transactions are public by nature.
- Price services (Coinbase, Kraken, CoinGecko): we ask them for coin prices. No personal data is sent.
We may also share data if the law requires it, or to protect SnapBid or others against fraud or abuse. Some of these services are based outside the EU (for example in the USA); where that applies, they use safeguards recognised under the GDPR, such as the EU's standard contractual clauses or the EU–US Data Privacy Framework.
6. How long we keep data
- Account, settings and activity: as long as your account exists. If you ask us to delete your account, we delete them within 30 days.
- Eldorado session: until you disconnect it or delete your account. Eldorado sessions also expire on their own after about 30 days.
- Payment records: as long as accounting and tax law requires (up to 10 years), even after your account is deleted.
- Visit details: daily visitor codes for 60 days; after that only totals are kept (no personal data). Visit notifications stay in our Discord until we delete them.
- Security counters with IP addresses: deleted within 1 day. Technical logs are kept by Cloudflare for a few days.
- Sign-in cookies: 30 days (session) and 1 year (device), or until you sign out or clear them.
7. How we protect your data
The site only works over encrypted connections (HTTPS). Passwords are stored as salted hashes. Eldorado sessions and the keys of deposit addresses are encrypted with a secret key that isn't stored in the database. Access to the systems is limited to us. No system is perfectly secure, but we take reasonable care, and we'll tell you and the authorities about a data breach where the law requires it.
8. Your rights
Under the GDPR you can ask us to:
- see the personal data we hold about you and get a copy;
- correct data that's wrong;
- delete your data ("right to be forgotten"), except what we must keep by law;
- limit how we use it, or object to uses based on our legitimate interest;
- give you your data in a common format to take elsewhere (portability).
To use these rights, contact us. We may ask you to prove the account is yours. We answer within one month. You can also complain to the data protection authority in your own EU country (you can find it on the European Data Protection Board's list).
9. Age
SnapBid is for people aged 18 or over. We don't knowingly collect data from anyone younger. If you think a minor has given us data, contact us and we'll delete it.
10. Changes to this policy
We may update this policy when SnapBid changes. If a change is important, we'll show a notice on the site or in your dashboard. The date at the top shows the latest version.