Privacy Policy

Last updated: July 2026. How we manage and safeguard your user account data.

1. Account Authentication

We authenticate accounts using NextAuth.js. When you register, we collect a secure hashed password along with your display preferences, favorite IPL franchise, and display name.

2. Google OAuth Integration

If you sign in with Google, we import your name, email address, and profile photo directly from your Google Account. This data is utilized solely for profile setup and display, and is never shared or sold.

3. Stored Information & Data Integrity

We store only database records essential for room creation, user bidding history, and leaderboards. Your personal details, account status, and room stats are stored securely in PostgreSQL.

4. Cookies & Local Storage

Auction Arena utilizes standard session cookies to keep you signed in. We do not use third-party tracking or advertising cookies. Any active auction state (e.g. current bidder info) is coordinated in memory via WebSockets.

5. Room Data & History

Active room data, customized settings, budget sheets, and final draft lists are saved for room history and review purposes. They remain private to the members who joined the room.

6. Security Measures

All data connections are encrypted over HTTPS/WSS. Password inputs are securely hashed using bcryptjs. We continuously audit dependencies to defend your account data.