Privacy
Last updated 27 August 2026.
Plain version: there are no ad networks, no analytics products, and no trackers on this site. The only personal data here is what you type into the bid form, plus a random id in your own browser so the visitor counter can tell people apart without knowing who they are.
What is collected
When you place a bid. Your name or company, the link you want on your spot, your email address, your artwork, and the amount you bid. There is no account and no password — bidding needs neither.
When you just visit. A random identifier is generated in your browser and stored there. It is sent back with a heartbeat so the counter at the top of the page can say how many distinct people are on the site, rather than how many times pages were loaded. It is not derived from anything about you, it is not linked to your bid, and it is meaningless outside this site. Clearing your browser storage removes it.
Server logs. Cloudflare records ordinary request metadata, including IP addresses, as part of running the site. That is Cloudflare’s standard logging, not something this site reads or keeps.
What is public
Bids are public by design: your name, your link, your artwork and your bid amount appear on the site as soon as you bid, and stay there. Winners stay on the page permanently, since the point is the credit.
Your email address is never shown to anyone.
What your email is used for
Three things, and nothing else: telling you if you have been outbid, sending the payment link if you win, and telling you if the auction is void. There is no newsletter, no marketing, and your address is never sold, rented, or shared with anyone outside the processors below.
Who processes data
- Cloudflare — hosting, and the Workers and KV storage that hold the auction book.
- Dodo Payments — payment for winning bids, as merchant of record. They collect your payment details directly, under their own privacy policy. This site never sees or stores card numbers.
That is the whole list. No analytics provider, no advertising, no session recording, no third-party fonts or scripts.
How long it is kept
Visitor heartbeats expire on their own within minutes. Bid records are kept for the run of the campaign and, for winners, for as long as the credit stands on the site. Email addresses are deleted once the campaign has closed and every winner has paid or dropped out.
Your choices
You can ask to see what is held about you, correct it, withdraw a bid, or have your data deleted, by emailing hello@etchmymac.com. If your logo has already been etched it cannot be removed from the metal, but the record and the link can come off the site.
Changes
Any change is dated at the top of this page.