Privacy Policy

When you create an account on Bid Wars, we collect only the information necessary to operate the platform effectively. This includes:

• Account Credentials: A chosen username and, for Finance Account holders, a verified email address used solely for authentication and platform communications.
• Google OAuth Data: If you choose to authenticate via Google, we receive your public profile name and email address from Google's verified identity service. No passwords are accessed or stored.
• Profile Metadata: Optional display name, avatar image, and player preferences that you voluntarily provide within the platform.
• Activity Records: Bid history, auction participation timestamps, virtual portfolio composition, and rank progression as required for platform functionality.

Bid Wars operates on a minimal data principle. We explicitly do not collect, request, or process the following categories of personal data:

Camera access may be requested solely when a user voluntarily uploads a custom profile image. This is optional and never automatic.

Information collected is used exclusively for the following purposes:

• Authenticating your identity and maintaining session security across devices.
• Maintaining the accuracy of your virtual portfolio, Paper Money balance, rank standing, and auction history.
• Sending transactional communications such as OTP codes, auction result notifications, and account security alerts.
• Improving platform performance, detecting abuse, and investigating reports of policy violations.
• Complying with applicable legal obligations where required by law.

We do not sell, rent, lease, or share your personal information with third-party advertisers or data brokers under any circumstances.

All user data is stored on secure, encrypted infrastructure. Your account information is retained for as long as your account is active on the platform. Upon account deletion, all associated personal data is purged from our primary systems within 30 days, subject to legally mandated retention exceptions.

Virtual platform records, including auction logs and rank history, may be retained in anonymised aggregate form for platform analytics and fairness auditing.

Bid Wars integrates a limited number of trusted third-party services necessary for platform operation. These include:

• Google OAuth 2.0 — Identity verification for Finance Account holders. Subject to Google's Privacy Policy.
• Resend — Transactional email delivery for OTPs and account communications.
• Cloudinary — Secure storage and delivery of user-uploaded profile images.
• Pusher — Real-time communication infrastructure for live auction events.
• Vercel — Application hosting and deployment infrastructure.

All third-party providers are contractually required to handle your data in accordance with applicable data protection standards.

We implement industry-standard security measures across the platform, including JWT-based session tokens with short-lived expiry windows, encrypted data transmission via HTTPS/TLS, and server-side validation on all sensitive operations.

While we apply commercially reasonable protections, no system can guarantee absolute security. Users are encouraged to keep their login credentials and any active OTPs confidential.

Subject to applicable law, you retain the following rights with respect to your personal data:

• Right of Access: Request a summary of the personal data we hold about you.
• Right to Rectification: Correct inaccurate information associated with your account.
• Right to Erasure: Request deletion of your account and associated personal data.
• Right to Object: Object to processing activities not covered by a legitimate legal basis.

To exercise any of the above rights, contact our team at support@bidwars.xyz.

We reserve the right to amend this Privacy Policy at any time. Users will be notified of material changes via in-platform notices or email (where applicable). Continued use of the platform following any update constitutes acceptance of the revised terms.

This policy is governed by and construed in accordance with the laws of India. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of India.