PREVIEW: Listing data updated Sun, Oct 18, 11:58 AM ET. Bids and end times may have changed, so check each listing at the source.

House ad · Your brand here, in front of surplus hunters all week. Slots start at $49/week →
Wild Lots

Legal

Privacy Policy

Effective: October 23, 2026

This policy explains what personal information Wild Lots (getwildlots.com and its newsletter) collects, why, and your choices. Wild Lots is a property of Tall Oaks Ventures, LLC, a Florida limited liability company ("we," "us"). We're based in the US, and our services run on US servers.

Questions or requests: hello@getwildlots.com.

The short version

  • You can read the site without giving us anything.
  • If you subscribe, we keep your email address to send the newsletter.
  • If you sponsor, we keep what you need to give us to run your ad and get paid.
  • We use one first-party cookie. No analytics, ad trackers, or third-party cookies, and we don't track email opens or clicks.
  • We don't sell your personal information.

What we collect and why

Newsletter subscribers

  • Your email address, to send the confirmation email, a welcome email, and the weekly newsletter (every Tuesday at 7:00 AM ET), plus when you confirmed and whether you're subscribed.
  • Your IP address, briefly, to rate-limit the signup form and stop abuse. It's held in memory for a few minutes and never saved to our database.

We use double opt-in: you're not subscribed until you click the confirm link we email you. That link expires after 48 hours.

Sponsors

  • Ad details you send us: business name, ad text, link, logo, start date, category (if any), and a contact email.
  • Booking and payment records: what you booked, the price, your email from checkout, and Stripe's reference numbers for the payment or refund. Stripe processes the payment. We never see or store your full card number.
  • Edit links: we email sponsors one-time links to submit and edit their ad. We store only a scrambled (hashed) version of each link's code, and links stop working at the edit lock or when they expire.

Browser notifications (optional)

If you click "Turn on notifications" and allow it, Google's Firebase code loads from Google's servers, your browser creates a push token (a random ID, not your name or email), and we store it in our database and in your browser's local storage to send one notification a day (about 9:00 AM ET). Google receives your IP address and the token to deliver notifications. Click "Turn off" and we delete the token; you can also block notifications in your browser.

Sponsor link clicks

Sponsor ad links pass through our site so we can count clicks. We store only counts (per sponsor, per day, site or newsletter). To skip repeat clicks, we compare IP address and browser type in memory for 30 minutes; they aren't saved.

Server logs

Our hosting provider automatically logs basic request data (like IP address, browser type, page, and time) to keep the site running and secure. These logs are kept for about 30 days. If you email us, we keep your message so we can reply.

Cookies and similar technology

We set one first-party cookie, named __session. It can hold:

  • a display theme preference, if you chose one;
  • sign-in for our team's admin area (expires after 12 hours);
  • a private booking-preview flag for invited sponsors (expires after up to 7 days).

It's only sent to getwildlots.com, and visitors who don't use any of these never get it.

What we don't use: no analytics tools, no ad or social-media pixels, no third-party cookies. We don't track email opens or clicks. Our fonts are self-hosted.

Do Not Track: We don't track you across other websites, and we don't let third parties do so on Wild Lots. So a Do Not Track signal from your browser doesn't change anything: we treat every visitor the same either way. The exceptions are the photo hosts and Google services described below, which receive your IP address when they load.

Things to know:

  • If you turn on notifications, Google's Firebase code loads from Google's servers, and the token is saved in your browser's local storage.
  • Many listing photos are served from our own servers. Others load directly from the agency's or auction site's servers, which can see your IP address and browser details under their own policies.

Who we share it with

We share personal information only with service providers that help run Wild Lots:

  • Resend: sends our emails and keeps a copy of our contact list, including who has unsubscribed.
  • Stripe: processes sponsor payments and refunds. Stripe also uses payment data for fraud prevention and its own legal obligations under its privacy policy.
  • Google (Firebase Hosting, Cloud Run, Firestore, Cloud Storage, Cloud Messaging): hosts the site in the US, stores our data (including the subscriber list and do-not-contact list), and delivers notifications.

We may also disclose information if the law requires it, to protect our rights or someone's safety, or as part of a sale or transfer of the business.

We do not sell or rent your personal information, and we don't share it for targeted advertising. Sponsors never get our subscriber list; they only get click counts.

How long we keep it

  • Unconfirmed signups: if you don't confirm within 48 hours, the request and its link expire, and a daily cleanup deletes them automatically.
  • Subscribers: while you're subscribed. If you unsubscribe, we stop emailing you right away and keep only your email address on a do-not-contact list so we never email you again by mistake. Ask us and we'll delete the rest of your data; we use that list for nothing else.
  • Push tokens: until you turn notifications off or the token stops working.
  • Sponsor and payment records: for as long as we run your ad, then up to 7 years for tax, accounting, and legal needs.
  • Server logs: about 30 days.
  • Emails you send us: as long as needed to handle your request.

Your choices and rights

  • Unsubscribe anytime with the link in any email. Ask us and we'll delete the rest of your data. We keep only your email address on a do-not-contact list so we never email you again.
  • Access, correct, or delete your information by emailing hello@getwildlots.com from the address in question. We'll answer within 30 days and may need to confirm it's you. If you ask us to delete your data, we'll delete everything except your email address on our do-not-contact list, which we keep only so we never email you again, and any records we must keep by law (like payment records).
  • Depending on where you live, you may have additional rights. We'll handle access and deletion requests the same way no matter which state you live in.

Security

We use reasonable safeguards, including HTTPS, a database visitors can't read, and limited admin access. No system is perfectly secure.

Children

Wild Lots is not directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has given us information, email us and we'll delete it.

Changes

We may update this policy. When we do, we'll change the "Effective" date above, and for significant changes we may also post a notice on the site or in the newsletter.

Contact

hello@getwildlots.com