Who we are and where this policy applies
Brand Anything is an open-source advertising-auction project maintained and operated by Tempest (“we”, “us”, or “our”). This policy applies to the hosted Brand Anything website, auction pages, and related services that link to it (the “Service”).
The source code is publicly available on GitHub. A person or organization running its own copy is a separate operator and is responsible for its own privacy notice and data practices. This policy does not automatically apply to independent deployments.
Information we collect
When you create an auction
We collect the public name and account information used to identify the creator, a private contact email, auction titles and descriptions, pricing and timing, and any photos, logos, 3D models, or other files you provide. If you sign in through X, we receive the account information needed to authenticate you.
When you bid or advertise
We collect your brand or bidder name, email address, website, optional social handle, logo or creative assets, bid amount, bid time, selected advertising space, and records of whether the bid was accepted, outbid, won, cancelled, or refunded.
Payments and Stripe Connect
Stripe processes payments, connected-account onboarding, identity checks, and payouts. We receive limited transaction details such as Stripe identifiers, payment and payout status, amount, currency, platform fee, refund, dispute, and chargeback information. We do not receive or store full card numbers, bank-account credentials, or the identity documents you submit directly to Stripe.
Device and usage information
Our hosting and security providers may process IP addresses, browser and device details, requested pages, timestamps, and diagnostic logs. We use essential cookies or browser storage for language, currency, sign-in state, draft auctions, and security. We do not use this information to sell profiles or run cross-site behavioral advertising.
What becomes public
Auctions are designed to be public. A creator’s display name, auction description, object images or models, available advertising spaces, prices, bids, and closing time may be visible to everyone. For accepted bids, the bidder or brand name, logo, website, bid amount, and bid time may also be public.
Private by default: contact email addresses, Stripe account identifiers, payment details, authentication tokens, and unpublished or rejected creative files are not intentionally displayed on public auction pages.
Do not upload confidential information as a public name, auction description, logo, image, model, website, or other field intended for publication.
How and why we use information
We use information to:
- create, publish, secure, and administer auctions;
- record bids, determine the highest valid bid at closing, and notify participants;
- process payments, deduct the disclosed platform commission, facilitate creator payouts, and handle refunds or disputes through Stripe Connect;
- review advertising materials, prevent fraud or abuse, and enforce our terms;
- respond to support, privacy, and legal requests; and
- maintain, debug, and improve the Service.
Depending on where you live, our legal bases are performance of a contract, our legitimate interests in operating and protecting the marketplace, compliance with legal obligations, and consent where the law requires it.
Retention and security
We keep auction and bid records for as long as they are needed to operate the placement, resolve disputes, prevent fraud, and maintain an accurate transaction history. Payment, tax, and accounting records may be kept for the period required by law. Rejected uploads, abandoned drafts, and inactive account data may be deleted or anonymized earlier.
We use reasonable technical and organizational safeguards, including access controls and restricted storage for non-public information. No internet service is completely secure, so we cannot guarantee absolute security.
Your choices and privacy rights
Depending on your location, you may have the right to access, correct, delete, restrict, or obtain a copy of your personal information, object to certain processing, or withdraw consent. You may also complain to your local data-protection authority.
Some information cannot be deleted immediately when it must be retained for payments, fraud prevention, legal claims, tax, or accounting obligations. Public bid history may be anonymized instead of removed when preserving auction integrity is necessary.
To make a request, contact Tempest. We may need to verify that the request relates to you before acting on it.
Children and policy changes
The Service is not directed to children, and auction participation is limited to people who can enter a binding contract. We do not knowingly collect personal information from children.
We may update this policy as the Service, payment flow, or law changes. The date at the top shows the current version. If a change materially affects active creators or bidders, we will provide additional notice when reasonably possible.