Privacy Policy
Last updated 24 August 2026.
Who we are
Ontop Business, based in the United Kingdom, operates ontop.business and is the data controller for the personal data described below. We're registered under UK data protection law and this policy is written to comply with UK GDPR.
What we collect
Listings. The URL or @handle, category, and bid amount you submit. This is published on the public leaderboard by design — don't submit anything you don't want public.
Visitor counter. A random ID stored in a cookie so we can show a live "online now" and total visitor count. It isn't tied to your name, email, or any other identifying information — it's just a number that lets us tell one browser apart from another.
Click counts. We count clicks on each listing as an aggregate number. We don't log who clicked or when for any individual visitor.
Payment. Payments are handled entirely by Stripe on their own hosted checkout page. We never receive or store your card number or other payment details — only confirmation that a payment succeeded.
Cookies
We set one cookie — a random visitor ID used only for the counter described above. We don't use advertising or third-party analytics cookies.
Who we share data with
Stripe processes payments on our behalf. Our hosting provider (Vercel) and database provider (Neon) process technical data — things like IP addresses and request logs — as a normal part of running the site. All three may process data outside the UK; where they do, they provide their own safeguards for that transfer (Stripe and Vercel are both certified under the EU-U.S. and UK-U.S. Data Privacy Framework).
How long we keep it
Listing and bid data is kept for as long as the leaderboard operates, since it's the public record the site is built around. Visitor counter data is kept for as long as the service runs. You can ask us to delete data tied to you at any time — see below.
Your rights
Under UK GDPR you can ask us to access, correct, or delete your personal data, or object to how we use it. Email hello@ontop.business and we'll act on it. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've got something wrong.
Changes to this policy
We may update this policy as the service changes. Material changes will be reflected here with an updated date at the top.