Privacy Policy

1. Data controller

Ugo Bittoni (sole trader « Alp'Vision Web », SIRET 924 572 670 00025), reachable at hello@brandthiswebsite.xyz, is the controller for the data processing described here.

2. Data collected

This site only collects what is strictly necessary for it to function:

When you place a bid or a request

• Email address
• Brand name and website link (optional)
• Bid amount
• IP address, to limit abuse (number of attempts per IP over a short period)

Payment

Card payment is handled entirely by Stripe. BrandThisWebsite never sees or stores your card number: only a transaction identifier and the amount paid are kept on the site's side.

Browsing

An anonymous identifier, generated by the browser and stored locally (not a cookie), is used to count visits and track which steps of the journey (page viewed, square opened, bid started…) are reached. The public site a visitor came from (for example a social network) and the type of device (mobile or desktop) are recorded the same way — never the IP address or precise location. All of this stays strictly aggregated, to understand how the site is used; no third-party advertising tracker is used and nothing is cross-referenced with other browsing activity.

3. Why this data is collected

• Managing bids and payments — performance of the sales contract for a square.
• Responding to requests and sending logo instructions — performance of the contract / legitimate interest in following up with customers.
• Limiting abuse (IP address, request quotas) — legitimate interest in protecting the site against fraud and automated misuse.
• Measuring traffic (anonymous identifier) — legitimate interest in understanding how the site is used, without individual profiling or targeted advertising.

4. Who has access to this data

No one other than the site's publisher, Stripe (for the part strictly necessary for payment), and Resend (for sending the payment confirmation email). No data is sold, rented, or shared for advertising purposes. Stripe and Resend may process data outside the European Union under standard contractual safeguards; see Stripe's privacy policy and Resend's privacy policy.

5. Retention period

Data related to a bid or application is kept for the duration of the relationship with the sponsor, then archived for 3 years after the sponsorship ends for accounting and legal purposes (invoicing, evidence in case of a dispute), before deletion. Anonymous browsing data is kept for a maximum of 14 months.

6. Cookies and local storage

This site does not set tracking cookies. It uses the browser's local storage (« localStorage ») for two things only: remembering your light/dark display preference, and generating the anonymous audience-measurement identifier mentioned in section 2. None of this ever leaves your browser toward a third party, and none of it is used to track you across other sites.

7. Your rights

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, and objection regarding your data, as well as a right to data portability. To exercise it, write to hello@brandthiswebsite.xyz. You may also lodge a complaint with the CNIL (the French data protection authority).

8. Security

The site is served over HTTPS (certificate renewed automatically). Payments go exclusively through Stripe, PCI-DSS certified. A dedicated access token protects the site's admin area.