Privacy
What this site stores
Short, because there is very little of it.
Visitors
A per-device cookie is set on your first request. It is never stored as itself — only a salted SHA-256 digest is kept, alongside the time it was last seen. That digest is what the online count and the rate limiter work from. If cookies are blocked, a salted digest of your IP address and user agent is used instead. Neither the raw IP nor the raw user agent is stored.
There is no analytics script, no advertising cookie and no third-party tracker on this site.
Payments
Checkout is handled entirely by Stripe. Card details never touch this server. What is stored here is the Stripe session id, the amount, the listing it was for and the same hashed device digest — so a buyer's total can be credited toward The Firestarter. Stripe's own privacy terms cover what they hold.
Listings
When you submit a URL, this server fetches that page once and reads its title, description and icon. Those are public page metadata and they are shown on your card. Nothing else is taken from the page, and no form on this site asks you for free text.
Clicks
Outbound clicks on a listing are counted as a plain number on that listing. No per-visitor click record is kept, so the count cannot be turned back into who clicked what.
Requests and deletion
Write to hello@firebid.lol. Because the only identifier here is a salted digest, the practical way to remove yourself as a visitor is to clear the cookie — there is nothing else tied to you. Payment records are kept as long as accounting requires.