Privacy

IBI Technologies Ltd, company number 17055807, in the United Kingdom, is the controller for the personal data described here. Contact us at hello@ibitechnologies.co.uk about anything on this page.

If you buy a slot:

• the email address you give us, used only to tell you about your listing
• the blockchain address you pay from, which we see because it is part of the payment
• the listing you submit: link, name, description, category, ticker and any social links you choose to add

If you only visit the board:

• when you click through to a listing, we store a one-way salted hash of your IP address, the listing you clicked, and the time

We do not collect names, we do not run analytics, we do not use tracking cookies, we do not have a third-party advertising pixel, and we never sell or share data for marketing.

Every listing shows a click count, and that number is only meaningful if the same visitor refreshing does not inflate it. Hashing lets us tell one visitor from another without keeping anyone’s IP address.

The hash is one-way. We cannot turn it back into an IP address. It is still treated as personal data, because it is derived from information about you.

Performance of a contract: your email and payment details, because we cannot sell you a slot without them.

Legitimate interests: the click hash, so click counts are honest and the board is not trivially inflated. We consider this low impact because the data cannot identify you to us. You can object using the contact address above.

Only the parties we actually need:

• our hosting provider, which runs the server and its database
• blockchain networks, which are public by design: the payment you make is visible to anyone, forever, and that is a property of the blockchain and not something we control
• blockchain data providers we query to confirm a payment arrived
• our payment processors, where a payment is routed through one: CPAY for certain chains, and Stripe for card payments where offered, each receiving what it needs to process that payment

Nobody else. No advertisers, no data brokers, no analytics vendors.

Click records are deleted automatically after 90 days.

Listing details and payment records are kept while the listing is live and for six years afterwards, because they are financial records we are required to be able to produce.

Rejected listings and their submission details are deleted after 90 days.

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to our use of it, or ask for it in a portable format. Email the address at the top and we will respond within one month.

We cannot delete anything from a blockchain. A payment you made is a public record on a network we do not control, and no request to us can remove it. We can delete what is in our own database.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk.

Our server is in the European Economic Area. Some of the providers we query to confirm payments are outside the UK and EEA. Where that happens the data involved is a blockchain address or a transaction hash, both of which are already public.