Legal
Privacy Policy
Last updated: September 2, 2026
Spentwall is a public wall. The title, description, link, logo, cumulative total and bid history of every entry are intentionally public and are the product. Everything else about you, particularly your email address, IP address and payment details, is private, and this policy explains exactly what we collect, why, who processes it and how you can exercise your rights. We are the data controller and are established in the Netherlands, so the General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG apply.
Data you give us
- Email address when you submit an entry, bid, claim an entry, sign in to your dashboard or file a report with follow-up contact. Your email is never displayed on the wall.
- Entry content: title (max 40 characters), description (max 120 characters), https link and an optional logo image (PNG, JPG or WebP up to 2 MB, EXIF metadata stripped on upload). This content is public by design.
- Payment information is entered directly into the hosted checkout operated by Dodo Payments. We never receive or store your full card number, CVC or bank credentials. We store the payment reference issued by Dodo Payments, the amount, the currency and a customer identifier.
- Age and terms confirmations (the timestamps of the checkboxes you tick) and your notification preferences.
- Reports you file about other entries, including the reason and any details you type.
Data collected automatically
- IP address, used for rate limiting, fraud prevention and reCAPTCHA scoring. Bids record the IP address that placed them.
- Technical logs: user agent, referrer, requested page, response status and timestamps in server and edge logs, plus error reports in Sentry.
- Analytics events (page views, wall scroll depth, bid-modal opens, share clicks) are collected only if you choose “Accept All” in the cookie banner. They are aggregated and not linked to your email.
- Entry statistics: view counts and outbound click counts per entry. These are counters, not per-visitor profiles.
We do not collect special-category data, and we do not buy data about you from third parties.