Privacy
Controller: Contact: hello@timobuilds.com.
Voting and anti-abuse
When you vote we store the duel, your choice, a status, and identifiers used to detect duplicate voting. Those identifiers are:
- a random visitor ID generated in your browser;
- a hash derived from your IP address, and a separate hash derived from your IP address together with browser signals your device sends with every request: user agent, accepted language and platform.
We do not store your raw IP address in the vote record. These hashes are pseudonymous rather than anonymous: they are derived from information about you and are used to link repeat attempts, so we do not describe them as anonymous data.
When you click through to one of the competing products we record that a visit happened, for which duel and which side, with a hashed visitor identifier. We do not record who you are.
Storage in your browser
We use your browser’s local storage, not cookies set by us, to keep a random visitor ID and a marker recording that you already voted in a given duel, so the page does not offer you a second vote. Our analytics provider sets its own identifiers, described below.
Analytics
We use PostHog (EU hosting) to understand how the site is used. We record page views, page exits, and a small set of product events: viewing a duel, starting and completing a vote, clicking through to a product, sharing, and, where bidding is enabled, bid and checkout events. General automatic click capture is switched off.
Session replay is switched off. We strip properties that look like tokens, hashes or secrets before sending events.
We publish only aggregate figures on the site: approximate active sessions in the last few minutes, and unique visitors since tracking began.
Application data
Our database (Supabase) stores:
- vote records, including whether a vote counted as valid, flagged or rejected;
- product-visit records;
- where bidding is enabled, bid records: the submitted product name and URL, the amount, the payment status, and the payment provider’s transaction identifiers.
The site is hosted on Netlify, which processes request data such as IP address in its server logs as part of delivering the site.
Payments
Payments are handled by a third-party payment provider. Card and billing details are entered with that provider. Outduel does not receive or store raw card details. Where bidding is enabled we receive transaction metadata: payment status, amount, the checkout and order identifiers, and the product name and URL you submitted.
Why we process it
To run and display duels, to keep voting fair by detecting duplicate and automated voting, to understand and improve the service, and to fulfil a purchased challenger position. Legal bases: our legitimate interest in operating the service and preventing abuse, and performance of a contract where you have paid.
Retention
We keep vote, visit and bid records only as long as necessary to operate and secure the service, audit competition results, and meet our legal obligations.
Your rights
You can request access, correction, deletion, restriction, portability, or object to processing, and you can complain to a supervisory authority. Contact hello@timobuilds.com. Because vote records are pseudonymous, we may need more information to locate yours.
