Privacy policy

Information we process

When you bid, we process the submitted destination, receipt email, bid and order records, payment identifiers, and season activity. Payment-card details are handled by Dodo Payments and are not stored by ONLY TEN.

Security and abuse prevention

Checkout uses a one-way keyed fingerprint derived from the request IP address and email to enforce short abuse-prevention limits. The original IP address is not stored in the rate-limit record.

Public information

Provisional and winning destinations, titles and descriptions retrieved from their public pages, positions, seasonal totals, and outbound-click counts may be public. Completed winning seasons remain in the public archive.

How we use information

We use information to reconcile payments, operate rankings, prevent abuse, moderate destinations, provide support, measure outbound clicks, and meet accounting or legal obligations.

Service providers

Vercel hosts the application, Neon provides the database, and Dodo Payments processes payments. ONLY TEN retrieves public page titles and descriptions directly and uses Google's favicon service through a cached same-origin endpoint for displayed destination icons.

Retention

Payment and order records are retained as needed for accounting, fraud prevention, disputes, and legal obligations. Public winning-season records may be retained indefinitely as part of the archive. Short-term rate-limit records are routinely removed.

Your choices

Contact the operator to request access, correction, or deletion where applicable. Some financial, fraud-prevention, dispute, and archived season records may need to be retained.