Privacy
What this site stores
Short, because there is very little of it.
Visitors
A per-device cookie is set on your first request. It is never stored as itself — only a salted SHA-256 digest is kept, alongside the time it was last seen. That digest is what the online count and the rate limiter work from. If cookies are blocked, a salted digest of your IP address and user agent is used instead. Neither the raw IP nor the raw user agent is stored.
There is no analytics script, no advertising cookie and no third-party tracker on this site.
Payments
Checkout is handled entirely by Stripe, through the account of universite.lol, which operates this site. Card details never touch this server. What is stored here is the Stripe session id, the amount, the listing it was for and the same hashed device digest — so a buyer's total can be credited toward The Firestarter. Stripe's own privacy terms cover what they hold.
Listings
When you submit a URL, this server fetches that page once and reads its title, description and icon. Those are public page metadata and they are shown on your card. Nothing else is taken from the page, and no form on this site asks you for free text.
Clicks
Outbound clicks are recorded twice: as a running total on the listing, and as one row per listing per device — the same salted digest described above, never an IP or a user agent. The second one exists so a listing can honestly say how many people clicked rather than how many requests arrived, which is the number its owner is paying for and the one they can check against their own analytics.
That does mean a per-device record exists, and an earlier version of this page said it did not. What it holds is a listing id, the digest, a count and two timestamps. There is no page history, no path, no referrer and nothing linking one listing's row to another's beyond the digest itself — and clearing the cookie makes a new one.
Requests and deletion
Write to hello@firebid.lol. Because the only identifier here is a salted digest, the practical way to remove yourself as a visitor is to clear the cookie — there is nothing else tied to you. Payment records are kept as long as accounting requires.