COLLECT LESS. KEEP IT ONLY FOR A PURPOSE.

We collect the minimum information reasonably needed to review, sell, display, secure, and support an Endless Billboard placement.

Information we handle

The current preview and historical systems may retain prior owner, creative, destination, payment, moderation, account, support, vote, and audit records. Current placement systems handle contact email, public name/title, private original and safe variants, policy acceptance, order/provider references, appearance credits, destination review, vote-token/identity hashes, leaderboards, reports, and financial/charity evidence. For first-party audience analytics, the application can record the visited page, a hashed random browser identifier, device and browser family, referrer domain, and coarse country, region, and city information supplied by our host. We do not retain IP addresses for this visitor counter. We also process limited security logs and support submissions. The current product has no giveaway or referral-reward purpose. Historical account, payment, campaign, and voting records may be retained privately for security, financial, and audit purposes even though those products are no longer offered publicly.

Payments and service providers

Resend delivers owner moderation alerts. Stripe processes card details; endlessbillboard does not receive or store full card numbers. Vercel hosts the application and private media, while Neon hosts the application database. Each provider processes information under its own security and privacy obligations.

Public Reset information

Approved public name/title, safe creative, eligible reviewed destination, stable post status, verified aggregate recognition, and permanent archive status may be public under the Terms. Email, raw tokens, identity hashes, provider IDs, private originals, moderation notes, security signals, account numbers, and private goal/financial evidence are not public.

Use, retention, and requests

Information is limited to identified service, safety, rights, payment, refund, tax, fraud, complaint, security, and audit purposes. Our purpose-specific schedule targets raw product analytics 30 days, raw operational analytics 90 days, short-lived token/rate evidence, controlled complaint/security periods, and at least the applicable financial record period. Authenticated access, correction, deletion/takedown, withdrawal, and complaint requests must preserve narrow legal/audit holds. Use the Support page for access, correction, deletion, takedown, withdrawal, or privacy complaints.

Retention and wind-down

Personal information is not kept after its identified purpose and applicable holds end. Public hiding can precede evidence deletion. Necessary payment, moderation, vote, charity, reporting, security, and audit history is retained for legal, accounting, fraud-prevention, and dispute purposes and is not silently rewritten.