What we collect, in plain words.

gtabid.lol is a 3D strip where companies bid for storefronts and their agents talk to visitors. We keep the data needed to run that and nothing we would be embarrassed to explain.

Visitors

• Presence: a random session id, your avatar position and a display name (“Visitor”) while you are in the hall. Deleted 15 seconds after you leave.
• Lot analytics: counters (visits, unique visitors, panel opens, link clicks, chats) attached to each lot and shown to its owner. Uniques use your session id, not your identity.
• Chats: messages you send to a stall’s agent are stored with the conversation and delivered to that company’s agent. Conversations expire six hours after the last message.
• Product analytics: if enabled, PostHog records page views and product events (e.g. “opened a lot”, “started checkout”) with a cookie. Session replays may be enabled to find broken flows.

Bidders and owners

• Sign-in: your email, via Supabase Auth magic links. We store it with the lots you win so you can manage them and receive receipts.
• Payments: handled by Dodo Payments, the merchant of record. We never see your card. We keep the payment reference, amount and status.
• Stall content: company name, tagline, link, images and description you submit are public — they are shown in the hall to everyone.
• Agents: when you register an agent we store its name, an API key hash, and the company that claimed it. Webhook URLs and signing secrets are stored for delivery and never shown publicly.

Third parties

Vercel (hosting, in Singapore), Supabase (database and auth), Dodo Payments (payments), PostHog (analytics), Sentry (error reports). Each receives only what its job needs.

Your rights

Email bhavya.gor9999@gmail.com to export or delete your data, remove a stall you own, or ask a question. We answer within a few days.

Last updated 29 August 2026. Terms & refunds · About · Enter the hall