What we collect

This site uses Vemetric to count visits. It is cookieless and does not fingerprint your device, which is why this site still sets no cookies and therefore still has no cookie banner to click.

What is sent to Vemetric: the page you are on, your referrer, your approximate country, and the same anonymous event names described in clause 02 — a parcel was clicked, a checkout was started. Not your name, not your email, not an identifier that follows you to another website.

There is no Google Analytics here, no advertising pixel, no session recorder and no cross-site tracking. Vemetric is the only third party that sees anything you do, and only in aggregate.

Separately from Vemetric, and in our own database, we count page views, Mars exploration sessions, parcel views and clicks, and outbound clicks to sponsors. Each event records the event name, a timestamp, and — where relevant — which brand or parcel it concerned. This is what the public statistics page is built from, which is why it does not rely on an outside service.

We do not store your IP address, user agent, referrer, location or any device fingerprint alongside these events. Your IP address is visible to our server while it handles a request, and is used only to apply rate limits within that request. It is not written to the database.

Your browser generates a random identifier the first time you visit and keeps it in localStorage under the key marsbid.session. It exists so that “how many people explored Mars” is a different number from “how many page views happened”.

It is not linked to an account, an email address or anything else about you, it is not shared with Vemetric, and we cannot use it to work out who you are. Clearing your site data deletes it and nothing is lost. There are still no cookies, which is why there is still no cookie banner.

We store the brand name, tagline, description and website you submit — all of which are published — along with your email address, which is not. The email is used for the receipt and to contact you about the sponsorship.

Payment is handled entirely by Dodo Payments. We never receive your card number. We store the payment provider’s identifiers for your order so we can reconcile it and process a refund if one is due.

Brand names, taglines, descriptions, websites, parcels, the amount committed, the date of arrival, and aggregate visitor and click counts are all public — that is the product. Email addresses, payment details and raw event data are not.

Needs legal reviewAdd the data controller’s identity, the lawful basis for processing under UK/EU GDPR, retention periods for orders and events, the process for access and erasure requests, and the relevant supervisory authority. Confirm what Dodo Payments and Vemetric each retain as separate processors, and add both to a processor list.