EFFECTIVE SEPTEMBER 14, 2026

Privacy.

This notice explains how BrandMyDrip handles personal information when you visit the site, apply to the student cohort, bid, upload creative or follow a sponsor link.

Who is responsible

BrandMyDrip is operated by 16237860 Canada Inc. For privacy, correction or deletion requests, contact hi@brandmydrip.com.

Information we collect

We collect sponsor names, websites, verified contact emails, uploaded logos or typography, bid and placement records, payment and refund references, and support messages. Student creator applications include an applicant’s name, email, campus, social-profile links, written responses and posting preference.

We also process basic device, network and security signals needed to keep the service reliable, prevent abuse and verify human requests. A first-party, HTTP-only visitor cookie stores a random identifier for up to one year. Our server converts it to a one-way keyed value before it reaches the analytics database. We use that value to estimate unique visitors, prevent repeated refreshes from inflating counts and de-duplicate sponsor clicks. It is not used for cross-site advertising or to identify you by name. Browser sessions keep authentication state locally; unfinished creative drafts may be kept in session storage on the same device.

Why we use it

We use this information to authenticate sponsors, operate the auction, calculate credit, take and refund payments, review creative, display approved sponsors, report campaign clicks, evaluate student applicants, provide support, prevent fraud and meet accounting or legal duties. Transactional emails are used to authenticate or service an account; promotional email requires a separate lawful basis or consent.

What becomes public

Approved sponsor names, websites, logos, placement status and winning bid totals may appear publicly. Aggregate site views, estimated unique visitors and daily unique sponsor-link clicks may also be public. Sponsor-link clicks are recorded by campaign, placement and link location for reporting; repeated clicks by the same visitor on the same sponsor placement are counted at most once per UTC day. The auction analytics tables do not store a visitor’s raw IP address. Contact emails, payment identifiers, refunds, visitor keys, pending artwork and student applications remain private.

Service providers and transfers

Cloudflare provides hosting, security and Turnstile; Supabase provides database, authentication and storage; Resend delivers email; and Stripe processes payments, refunds and, if enabled, tax calculations. If social sign-in is enabled and you choose it, Google or Microsoft also provides authentication and shares basic account identifiers such as your verified email with Supabase. BrandMyDrip does not request access to your mail, files or contacts. Stripe receives payment details directly, so BrandMyDrip does not receive full card numbers. These providers may process information outside Canada under their own safeguards and legal obligations.

Retention

We keep information only as long as reasonably needed for the purposes above. The browser visitor cookie expires after one year; the keyed visitor state is retained for up to 13 months from the last visit, while non-identifying lifetime totals may remain. Auction, payment, refund and consent records may be retained for accounting, fraud, dispute and legal requirements. Rejected or abandoned artwork and unsuccessful student applications are reviewed for deletion on a documented schedule.

Your choices and rights

You may ask what personal information we hold, request a correction, or ask us to delete information that we are not legally required to keep. You may also challenge our handling of your information. Contact hi@brandmydrip.com; we may need to verify your identity before acting on a request.

Safeguards, age and changes

We use access controls, encrypted transport, restricted service keys, signed webhooks and private storage for sensitive records. No Internet service is risk-free. BrandMyDrip is intended for people able to enter a binding sponsorship agreement; applicants or sponsors under the age of majority must have appropriate guardian or institutional authorization. Material changes to this notice will be dated and posted here.