Privacy Policy

Last updated: October 31, 2026.

1. Information we collect

A submission contains a public X post URL or ID plus moderation status, timestamps, and any reports. If you create an optional account, we store the name, email, authentication, session, and security data needed to operate it. Stripe contribution records include transaction identifiers, amount, currency, status, and the contributor email returned by Stripe.

2. Storage boundaries

D1 stores post URLs or IDs and moderation metadata, never post text or media. Successful public post data, including available author details and media URLs, is cached in Cloudflare KV for 24 hours. We do not store media files, private messages, protected X content, or payment-card details.

3. How we use information

We use these records to validate and deduplicate submissions, prevent abuse, screen eligibility and safety, operate human moderation and reporting, maintain optional accounts, process voluntary contributions, secure the service, and respond to requests. Contributions are never used to influence screening or visibility.

4. Service providers and post processing

Bumped sends only the data required for each provider to perform its role:

• Cloudflare runs the Worker, D1 database, 24-hour KV post cache, Turnstile bot check, and Workers AI screening.
• X is the original source of public posts. The selected provider supplies content for cards, admin preview, and screening through one shared service.
• The configured source is Xtracticle by default, or FxEmbed or X syndication. These public-content services may fail or delay source updates. Only successful results are cached; unavailable or failed lookups require human review.
• Stripe processes one-time and recurring contributions and handles payment details under Stripe's own privacy terms. Bumped receives transaction status and related identifiers, not card numbers.

5. Cookies and local preferences

Necessary cookies support authentication and security. Your browser may store theme, language, and cookie choices locally. Basic analytics runs only when configured and allowed by your cookie choice.

6. Retention and your choices

Source edits, deletion, or restrictions may take up to 24 hours after a successful fetch to appear here, plus upstream provider delay. Site hiding, rejection, and deletion apply on subsequent requests even when cached data exists. You can report a card, manage an optional account, or contact us for review or removal. Transaction and security records may be retained for accounting, fraud prevention, disputes, or legal obligations.

7. Contact

Questions, privacy requests, or removal concerns can be sent to victorylaunches@gmail.com