Privacy policy

What we collect, why, and who else is involved.

Who is responsible

BeyondSky OÜ, a company incorporated under Estonian law and registered in the Estonian commercial register under number 16894028, operates ponzi.to and is responsible for the personal data described here. Contact: [email protected].

What we collect

• Account: your name, email address and a salted hash of your password. We never store the password itself.
• Brands: the names, taglines, links, colours and logos you save. Drafts are visible only to you and to operators. A placement is public while it is on the billboard, and on any receipt link you choose to share.
• Payments: order amounts, payment and refund identifiers and statuses, and the terms you accepted. Card details go directly to Dodo Payments and never reach us.
• Audience counts: a random identifier is kept in your browser's local storage. We store only a one-way hash of it, per placement and per day, to count views and clicks once. We do not build visitor profiles.
• Security: a hash of your IP address is kept for up to 15 minutes to limit sign-in attempts. Operator actions are recorded in an audit log.
• Email preferences: whether you asked for placement and refund notifications.

Cookies

We set one cookie, ponzi_session, to keep you signed in for up to 7 days. We use no advertising or analytics cookies and no third-party trackers.

Why we use it

To run your account and placements and to process payments and refunds (performance of our contract with you), to keep the service secure and count audience figures (our legitimate interest), to send notifications you opted into (your consent, which you can withdraw in My account or through the unsubscribe link), and to keep payment records where the law requires it.

Who else processes it

• Dodo Payments: checkout, payments and refunds, as merchant of record.
• Resend: sending account and notification emails.
• Cloudflare: network delivery and protection in front of the site.
• Hetzner: server hosting and backups (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (https://www.hetzner.com)).
• Google Fonts: the site's typefaces are loaded from Google, which receives your IP address when the page loads.

Some of these providers may process data outside your country. We do not sell personal data.

How long we keep it

Account and brand data are kept while your account exists. Sessions expire after 7 days. Server backups are kept for 14 days. Payment, refund and consent records are kept for as long as accounting and tax rules require.

Your rights

You can ask for a copy of your data, for it to be corrected or deleted, or object to how it is used, by writing to [email protected]. If you are in the EU or UK you can also complain to your data protection authority.