Privacy Policy

1. What urls.bid does

urls.bid provides short links, link-in-bio pages, paywalled redirects, paywalled file downloads, static website hosting, agent API access, and x402 payment flows on Base and Solana.

This policy explains what we store to provide those services. It is not a promise that blockchains, wallet providers, RPC providers, OAuth providers, or external destination websites process data the same way we do.

2. Account and authentication data

When you sign in with X/Twitter, Better Auth stores the account and session records needed to keep you logged in. This can include your user id, name, email when provided by the OAuth provider, profile image URL, X/Twitter handle, session token, timestamps, user agent, and IP metadata associated with the session.

We use HTTP-only session cookies and bearer tokens/API keys for dashboard and agent access. We do not ask for or store your X/Twitter password.

3. Links, bio pages, files, and hosted sites

For short links and bio pages, we store the slug or username, destination URLs, titles, descriptions, avatar URLs, themes, payout wallet addresses, payment price, accepted chains, device or geo routing rules, Open Graph metadata, marketplace flags, and related timestamps.

For paywalled files and static hosted websites, file metadata and uploaded content are stored in Cloudflare KV. Static website metadata, active versions, and hosted file lists are also stored so the edge Worker can serve the correct asset.

4. Payments and analytics

For gated resources, we store payment records needed to prevent replay, verify access, show revenue, and avoid asking a wallet to pay twice. This can include slug, wallet address, transaction hash or signature, chain, amount, and payment time.

For analytics, we store click counts and coarse request context such as referrer category, country, spam/safety status, and timestamps. We use this to show dashboard analytics, enforce limits, and fight phishing or abuse.

5. On-chain and third-party providers

Some slugs, transactions, and payment proofs may be public on Base, Solana, or other supported chains. Public blockchain data is not controlled by urls.bid and may be permanent.

We rely on infrastructure and network providers such as Cloudflare, Alchemy, Solana RPC providers, Base RPC providers, wallet libraries, X/Twitter OAuth, and x402 facilitators. These providers may process data under their own policies.

6. Cookies and browser storage

We use essential cookies for authentication and security. The dashboard may use local storage for interface state such as the active dashboard tab. We do not use third-party advertising cookies in the application.

7. Retention and deletion

We keep account, link, payment, analytics, file, and site records as long as needed to operate the platform, prevent abuse, satisfy operational requirements, or provide your dashboard history.

Deleting a link, file, hosted site, or bio item from the dashboard removes the application-level record where supported. It does not remove public blockchain records or data already processed by third-party providers.

8. Contact

For privacy questions, security reports, or account requests, contact urls.bid through the official X/Twitter account at @urlsdotbid.