Legal

Privacy Policy

Last updated: August 29, 2026

The short version: no cookies, no third-party tracking, no account to create. Bidding needs a card and an email, so I keep your name, email, bid amount, logo file, and a payment reference — nothing more, and your card details never touch this site.

Who I am

TriHard is run by me, Cameryn Griffiths (“I”, “me”), as an individual fundraising for my own triathlon entry — not a company. Contact: cameryngriffiths@gmail.com. I’m the one responsible for the data described on this page.

What I collect when you bid

  • Name or brand. Shown on the leaderboard next to your bid, so other sponsors and I know whose it is.
  • Email address. Used to send you a payment receipt and to reach you if you win. Never shown publicly, never shared with other bidders.
  • Logo file, if you upload one. Stored so it can be printed on the kit if you win.
  • Bid amount and time. The auction doesn’t work without them, and they’re shown publicly on the leaderboard.
  • A payment reference. The identifiers Stripe returns for your deposit, so it can be refunded automatically if you’re outbid, or applied to your invoice if you win. Your card number never reaches this site — it’s entered directly on Stripe’s own payment form.

There’s no sign-in and no account. Placing a bid is what identifies it as yours.

What’s public and what isn’t

Once you place a bid, your name, bid amount, and logo (if uploaded) are visible to anyone viewing the site — that’s how a live auction works. Your email address is never published and is only used by me to contact you.

Cookies and visitor counts

This site doesn’t use cookies, and there’s no third-party analytics or advertising tracking of any kind. The “people here now” and total visitor counts you see on the page are anonymous tallies — there’s no identifier tied to you, and nothing about your visit is stored once you close the tab.

Who processes your data

  • Supabase — hosts the database and stores uploaded logo files.
  • Stripe — processes and refunds deposits, and holds your card details, which this site never sees.
  • Vercel — hosts the site itself and keeps standard server logs (the kind any web host keeps automatically, e.g. IP address and request time, for security and debugging).

I don’t sell your data, and I don’t use it for anything beyond running this auction.

How long I keep it

Winning bid records — name, logo, amount — stay for as long as that position is on the kit, since they’re the record of who sponsored what. If you’re outbid or ask me to delete your information, I’ll remove your email and logo file within 30 days; the bid amount itself may stay as part of the auction’s public history, with your name replaced.

Payment records are kept for as long as standard accounting and tax record-keeping requires.

Your rights

You can ask me to show you what I have on file, correct it, or delete it, by emailing cameryngriffiths@gmail.com. I’ll get back to you as soon as I can.

Changes

If I change this policy in a way that affects you, I’ll update the date at the top. For anything material, I’ll try to reach current sponsors by email directly.