Privacy

If you just browse

Nothing about you is stored by the site. No analytics, no advertising, no tracking pixels, no outside fonts or scripts. The web server keeps a standard access log (address, time, page, browser) like every web server; it is not used for anything but running the server. Rate limits keep a one-way scrambled form of your network address for two days, never the address itself.

If you create an account

• Username (shown to nobody else: other bidders see you as “Bidder 1”, “Bidder 2” and so on).
• Password, stored only as a one-way hash.
• Contact (an email address or phone number). Only Weldon sees it, and only to reach you about a lot you won or bid on. It is never shown to other bidders, sold or shared.
• Your bids, maximums, watchlist and notices. Your maximum is not shown while you lead. Bid amounts appear in the public history under your anonymous label, and if someone outbids your maximum, the history shows the amount it reached, so that amount becomes visible.
• When you last signed in.

Cookies

Two cookies, both strictly needed: a sign-in cookie (__Host-wa_sess) once you sign in, and a security cookie (__Host-wa_csrf) on pages with a form, which stops other sites from submitting forms in your name. No other cookies.

How long

Your account stays until you delete it (Account settings). Deleting it removes your username, contact, watchlist, notices and your private maximum bids (a maximum on a lot that is still open is removed when that lot closes); your past bids stay in the lot histories under their anonymous label, because they are the record of a sale. Read notices are deleted after 180 days. Backups of the database are kept for 14 days.

Email and texts

The site sends none. Notices appear on the site only. If you win, Weldon may contact you directly at the contact you gave.

Questions

Ask Weldon Hastings through the WeldonPC.com contact page.