A little attention.
A little privacy.
Last updated: .
Who is responsible for your information?
Michael Kennedy, a sole trader trading as OutBragger, is responsible for the personal information used by this service. Contact support@outbragger.com with privacy questions or requests. ICO registration number: ZC237995.
Business address: 6, 81 London Road, Newbury, United Kingdom
Your public bid
Public leaderboard messages may be sent to Google Translate for automatic translation. We keep the original text available.
Your chosen alias, message, credited amount, confirmation time, awards and board position appear on your public bid page. Use an alias if you do not want your real name displayed. Keep private contact details and other people's personal information out of your message.
Private bid codes, payment destinations and transaction evidence are not included in the public bid page. Cryptocurrency transactions also create records on their respective blockchains; OutBragger cannot remove those blockchain records.
Information used to provide the service
We store checkout details, the agreed quote, payment verification, your chosen public entry and a hash of your private code to process your bid and provide its receipt. We use this information to perform the service you request.
We also use limited session, network and moderation information to prevent fraud, duplicate payments and abuse, and to keep the service secure. Our legitimate interests are protecting the service and the people who use it. If you email support, we use your message and contact details to respond and deal with the issue.
Optional bid verification checks your private code against its stored hash and gives you a support reference valid for seven days. That reference identifies the bid and verification time; it does not contain your private code. Send it only to support when needed.
Optional accounts
After a confirmed bid, you may create an account with a fixed username and password. No email address is requested. We store a memory-hard password hash, one-way hashes of account session and one-time setup or recovery tokens, and the association between your account and claimed bids. We never store the raw password, account session token, setup token, recovery token or private bid code.
Account history is private and shows active or confirmed bids only. A claimed private bid code can verify ownership, manage that bid’s discussion and recover the account. Password recovery revokes earlier account sessions.
Cookies and browser storage
An essential cookie keeps private checkout access in your browser for up to seven days. If you sign in, a separate essential account cookie lasts up to 30 days. Design and currency preferences remain in browser storage until you change or clear them. Your private bid or referral code is kept in the current tab so you can save it; keep your own private copy before closing that tab.
The site does not load advertising trackers, analytics scripts or external fonts. Links to other websites open third-party pages, whose privacy practices are their own.
Referral links
Following a referral link associates its public code with your browser session for up to seven days. The eligible referrer is saved when checkout starts. We use it to total confirmed referred bids without publishing who referred an individual bidder.
A referrer profile stores your chosen public name and a hash of its separate recovery code. After three confirmed referrals, its name, aggregate totals and badges become public. Before qualifying, those totals are available in the referrer's own private account.
Discussions
Where discussion posting is available, replies and chosen display names are public after approval. A verified [Bidder] reply deliberately uses the bid's public name. Reports stay private. Spam checks use session identifiers, daily keyed network hashes, duplicate detection and moderation records; raw IP addresses are not attached to replies.
Live posting uses Cloudflare Turnstile to check automated submissions. Its widget connects to Cloudflare when the posting check is available. Turning a bid's discussion off hides replies without deleting them.
Videos
Video cards and player pages use thumbnails stored by OutBragger. YouTube or Vimeo does not receive a request merely because you open one of our pages. The selected provider receives a request, including the usual network and browser information, only after you press Play and its privacy-enhanced player is inserted.
Service providers
AlphaVPS hosts the application and database. Cloudflare provides website delivery, security and encrypted archive storage. Zoho provides the support mailbox. These providers process information needed to deliver their services. Their infrastructure and support may process information outside the UK; contact us for information about the arrangements relevant to your request.
How long information is kept
Confirmed bid records and their encrypted archives are retained permanently to preserve the bid history and its financial audit trail. Public display can be corrected or hidden following review; that does not remove the original financial record or archive. Consider this before putting personal information in an alias or message.
Unpaid checkout records, referrer profiles, replies, reports and support correspondence do not currently have an automatic deletion date. We review requests about these records individually. Expired referral visits are removed by the background worker, and its temporary discussion network records are removed after two days. Encrypted server backups expire after 30 days.
Your privacy requests
Email support@outbragger.com to request access, correction, erasure, restriction or a portable copy of your information, or to object to processing based on legitimate interests. Which rights apply depends on the information and why it is kept. We may need proportionate information to verify your request and will explain our response, including any retention constraints.
You can also raise a data-protection concern with the Information Commissioner's Office.