Privacy

The data controller is Dev realm. For any privacy question, or to exercise any right described here, write to devrealm07@gmail.com.

When you bid

• The platform, handle and amount — all of which appear publicly on the board, which is the point of the purchase.
• A display name and biography, if you choose to type them, used until real profile data is available.
• An email address, only if you choose to give one, used solely to tell you when your listing is outbid.
• A record that you accepted these terms: the version numbers and the timestamp. This is a legal requirement, not analytics.
• The country your payment came from, and a hashed visitor identifier, for fraud and abuse detection.

We never see your card details. Payment is handled entirely by our payment processor; we receive only a confirmation, an amount, and a session identifier.

When you visit

• A first-party cookie holding a random visitor identifier, which is hashed with a secret before it is stored, so the stored value cannot be matched back to the cookie by anyone reading the database. It is used to count visitors and to show how many people are on the board right now.
• A record when an outbound profile link is clicked — which listing, and when — so the board can show tracked click counts. This is what a paid listing is buying.

We do not run third-party advertising or cross-site tracking, and we do not sell data to anyone.

Listings may show a display name, biography, profile image, verification marker and follower count taken from the relevant public profile. Profile images are copied into our own storage rather than linked from the platform. If you are the owner of a listed profile and want that information removed, use the report form — we delete the stored image, not merely hide it.

Email is transactional only. If you supply an address with a bid, we use it for one purpose: to tell you when that listing is outbid, at most once per hour per listing. Every message carries a one-click unsubscribe link, and unsubscribing is permanent — a later bid with the same address will not re-enable it.

We never send marketing. Not newsletters, not announcements, not “we miss you”. If we ever wanted to, we would have to ask for separate consent first.

• Our hosting provider, which runs the site and its database.
• Our payment processor, which handles checkout and holds your payment details.
• Our email provider, used only for outbid notices.
• Our file storage provider, which holds mirrored profile images.

Each processes data only on our instructions. Data may be processed outside your country, including in the United States.

• Listings and payment records — kept while the board runs. The bid ledger is a financial record and is retained as long as the law requires.
• Click events — the individual events are summarised into hourly counts and the raw events are not kept indefinitely.
• Presence records — the “watching now” count is derived from a short-lived window of activity, measured in minutes.
• Unsubscribe records — kept permanently, because that is the only way to honour them.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to devrealm07@gmail.com and we will respond.

One limit worth stating plainly: a completed payment and the listing it produced are a public record of a transaction, and we cannot un-publish the history of a public board retroactively. We can remove profile information and stored images, and we can remove a listing.

B6 is not for anyone under 18, and we do not knowingly collect data from anyone under 18.

This policy is versioned. The version in force when you bid is recorded with your bid. Material changes get a new version and a new effective date.