Privacy Policy

Idlebid (“we”, “us”) shows one short sponsored line while you wait for an AI tool to answer, and pays you part of what advertisers pay for it. This policy explains what we collect, why, who helps us run the service, and the choices you have. It covers idlebid.com, our browser extension, our VS Code and JetBrains plugins and our idlebid command-line tool.

What we never collect

Our apps never read, store or send your prompts, the AI's answers, your source code or your file names. The browser extension only notices that an AI answer is in progress on a supported site, so it can show the sponsored line; it does not read the page's text.

What we collect

Your account

• Your email address, how you signed in (email link, Google or GitHub) and your country if you tell us.
• A referral code, and who invited you if you joined through an invite link.
• For administrators only: an encrypted two-factor sign-in secret.

Your devices

• For each linked device: which app it is (for example the Chrome extension or VS Code), its version, a public key used to check that its reports are genuine, and when it was last used.

Sponsored lines shown to you

• For each ad view or click: which ad, the site or app it appeared in (for example chatgpt.com or vscode), how long it was visible, when, the country your connection came from, and whether the connection came from a data centre.
• Your IP address is not stored. We keep only a one-way, salted fingerprint of it, used to detect fraud such as many accounts behind one connection.

Money

• Your earnings and balances.
• Payout details you give us (for example a PayPal email address or bank account) and payout history.
• Tax details you give us before a payout: legal name, country, address and tax ID. The tax ID is stored encrypted; we show only its last four characters.
• If you advertise: your company name, billing country, VAT or tax ID, campaigns, Board listings and payments.
• If you pay by bank transfer: the country you choose and the screenshot or PDF of the transfer you upload. Only our administrators can open it.

Cookies

• One sign-in cookie (idlebid_session), set only when you sign in, which keeps you signed in for up to 30 days. During Google or GitHub sign-in, a second cookie lasts 10 minutes. We use no advertising cookies and no third-party trackers. Our host, Cloudflare, may count visits with its privacy-focused Web Analytics, which sets no cookies and does not follow you across sites.

Why we use it

• To run your account and sign you in.
• To show sponsored lines, count qualified views and pay you and charge advertisers correctly.
• To prevent fraud (fake views, bots, shared or data-centre connections) and keep payouts honest. Accounts that trip a fraud rule have their earnings held while a person reviews them.
• To meet legal duties, such as tax and accounting records.
• To send emails you need: sign-in links, payment and payout notices, and alerts you turn on. We do not send marketing email without your consent.

Who helps us run Idlebid

We do not sell your personal data. We share it only with services that run Idlebid for us, under their own privacy and security terms:

• Cloudflare (hosting, network and security).
• Supabase (our database, hosted with Amazon Web Services).
• Resend (sending email).
• Payout providers you choose, such as PayPal, Wise or Payoneer, when we pay you.
• Google or GitHub, only if you choose to sign in with them.

Advertisers see totals (views, clicks, spend) and never who you are. A sponsored line's “Why this ad?” link shows who paid for it. We may disclose data when the law requires it.

Where your data is stored

Your data may be processed outside your country, including in Japan (our database) and wherever Cloudflare serves the site. We use providers that protect it with encryption in transit and contractual safeguards.

How long we keep it

• Sign-in links expire after 15 minutes; sign-in sessions after 30 days.
• Account and activity data are kept while your account is open.
• When you delete your account (Settings), we delete your devices, ad views and clicks, sessions and settings. Money records (earnings, payments, payouts and invoices) are kept as long as accounting and tax law requires, without your activity history.

Your rights

Depending on where you live (for example under Saudi Arabia's Personal Data Protection Law or the EU and UK GDPR), you can ask to access, correct, export or delete your data, object to or restrict some uses, and withdraw consent. You can delete your account yourself in Settings. For anything else, email support@idlebid.com. You may also complain to your data protection authority.

Children

Idlebid is for people aged 18 or over. We do not knowingly collect data from children.

Security

Connections are encrypted, device reports are signed, sensitive values (tax IDs, two-factor secrets) are encrypted at rest, and database access is restricted to our servers. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Changes

We will post changes here and update the date above. If a change is significant, we will also tell you by email or in the app before it applies.

Contact

Questions or requests: support@idlebid.com.