Last updated: September 12, 2026
This Privacy Policy describes how Techtonixmedia (a wholly-owned subsidiary of Smarctek LLC, together "we," "us," or "Techtonixmedia") collects, uses, and shares information in connection with the BUMBUM leaderboard at techtonixmedia.com/bumbum (the "Service").
Account & contact. When you sign in or place a bid, we collect your name, email address, and a hashed authentication credential. Optional profile fields (avatar, display name) are collected if you provide them.
Guest bidder codes. If you bid as a guest, we generate an 8-character bidder code tied to your email address and email it to you. We store only the SHA-256 hash of the code plus a 2-character hint (the last two characters, used only for "code ending in XY" recall). The plaintext is never persisted.
Listings you submit. Any content you attach to a listing — name, URL, image, category, description — is public by design and displayed on the leaderboard. If you list as a guest, we mint an edit token so you can manage the listing without an account; it is stored on the listing row and never displayed publicly.
Comments & reactions. Comments you post (body, category) and their bid history are public. Reactions (likes/dislikes) are keyed by a browser-local visitor id stored in your device's localStorage — not tied to a real identity.
Payment information. We do not receive or store your full payment card number. Bids are processed by Dodo Payments, which acts as the merchant of record and handles card data, tax calculation, and sales-tax/VAT remittance under its own privacy policy. We receive from Dodo only a transaction reference (payment id), amount, currency, tax portion, and the billing customer's email for our records.
Subscription state (Verified Visitor). If you subscribe to the Verified Visitor tier, we store your Dodo subscription id, customer id, and the paid-through timestamp, which together determine whether the verified badge and paid-testing-program applications are unlocked for your account.
Usage & device. We record aggregate site visits, listing clicks, and bid events for rate-limiting, fraud prevention, and to display live counters. We log IP address, user-agent, and coarse geo (city, region, country) from edge headers for security purposes and to attribute bids to the correct scoped leaderboard. These are not displayed publicly.
We do not sell your personal information. We do not use your data for behavioral advertising on third-party sites.
We share personal information with the following processors, each bound by its own privacy commitments:
The leaderboard is public. Your listing name, category, cumulative bid amount, and rank are visible to anyone. If you place a bid while signed in, your display name may appear in the activity feed. Bid amounts are never anonymized.
Bid and payment records are retained for at least seven (7) years to satisfy tax, accounting, and chargeback-dispute obligations. Listing and account data are retained for the life of the account plus one (1) year, unless deletion is requested earlier and no legal-hold exception applies.
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other U.S. states with comprehensive privacy laws may exercise state-specific rights.
To exercise any of these rights, email privacy@techtonixmedia.com from the email address on file. We will respond within 45 days. Note that bid and payment records subject to legal-retention requirements cannot be deleted before the retention period ends.
We use strictly necessary cookies for authentication, session persistence, and fraud prevention. We do not use third-party advertising cookies. Blocking essential cookies will prevent you from signing in or placing bids.
The Service is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. If we learn we have done so, we will delete the account.
The Service is operated from the United States. If you access it from elsewhere, your information will be transferred to and processed in the United States, which may have data-protection laws different from those in your country.
We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, or any other applicable U.S. state privacy law. We do not engage in cross-context behavioral advertising. We do not permit third-party advertising cookies. We have not sold or shared personal information for monetary or other valuable consideration in the preceding twelve (12) months, and we have no plans to do so.
Because we do not sell or share your personal information, there is no “Do Not Sell or Share My Personal Information” link to click. If you have specific questions about our processing, contact us at privacy@techtonixmedia.com.
We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we hold, but no system can be guaranteed 100% secure. In the event of a data breach involving your personal information, we will notify you and the applicable regulatory authorities in accordance with the timelines and requirements of the U.S. federal and state data-breach notification laws that apply to us, including where applicable the notification timelines under the CCPA/CPRA, the New York SHIELD Act, and the notification statutes of your state of residence.
To report a suspected vulnerability or unauthorized access, email privacy@techtonixmedia.com with subject line “Security Report”.
Any dispute, claim, or controversy arising out of or relating to this Privacy Policy — including any question about the collection, use, disclosure, retention, or protection of your personal information — is subject to the informal dispute resolution requirement, binding individual arbitration, class action waiver, prevailing-party attorneys' fee provision, one-year time limit, and Connecticut governing-law and forum provisions set out in the Terms of Service. Those provisions are incorporated into this Privacy Policy by reference and apply with equal force here.
We may update this Policy from time to time. Material changes will be posted here with a revised "Last updated" date and, where feasible, notified by email.
For privacy-related inquiries, contact us at privacy@techtonixmedia.com, or by mail to Techtonixmedia, c/o Smarctek LLC, at the address provided in bid receipt emails.