Privacy policy

Last updated 2026-11-06.

Who we are

Bikoosh runs the trackers on bikoosh.com (Tender Watch, DataWork Watch, Race Entry Watch, Shutdown Watch and the others listed in the footer). We decide what is collected on this site and why. Contact for anything on this page: [email protected].

What we collect, and why

Your email address, when you sign up for a digest or an alert, start a trial or sign in: to send what you asked for (with a confirm step first) and the sign-in links. Every email has a one-click unsubscribe.
Purchase data. Gumroad is the merchant of record: it takes the payment and we never see your card. Gumroad tells us the sale (product, price, currency, time, the email used) so we can switch on what you bought, and the link parameters the checkout was opened with (for example the Google click id and your consent state, below).
Server logs: the address a request came from, the page, the time and the browser's user agent, used to run and protect the site (rate limits, abuse, errors).
The Google click id (gclid) and your consent state. When you arrive from a Google ad, the link carries a click id. We keep it in a first-party cookie and pass it to Gumroad with your consent state, so a purchase can be matched to the ad click (see Google Ads conversion measurement).
Anonymous page beacons: a page view, a click on a buy button, a cookie choice. They carry the product, the event and at most our own page path, the referring site's name and your country; no name, no email, no identifier of you.
Product data you give us: the listings, filters, keywords, domains or watchlists you set up in a product, used only to run that product.

Google Ads conversion measurement

We advertise some products on Google. To know whether an ad led to a sign-up, a trial or a purchase, pages on this site load the Google Ads tag (gtag.js) from Google. It is the only third-party script on the site, and we use no Google Analytics.

In the UK, the EEA and Switzerland it runs only with your consent (the legal basis). Until you choose, Google's consent mode keeps advertising storage off: no advertising cookie is set and the tag sends only cookieless signals with identifiers removed.
Everywhere else it is on by default and you can opt out at any time with the same choice (legal basis: our legitimate interest in measuring our own ads). A refusal is honoured wherever you are, including under the California opt-out rules.
What reaches Google: that a conversion happened (sign-up, trial start, purchase and its value), the click id, the page address and your consent state. For purchases we upload the click id, time, value and consent state in a file; never your email.

Google acts under its own terms and privacy policy for this data; it does not get our email lists.

Cookies

bk_consent: your cookie choice (accept, reject, or your settings), six months.
bk_gclid: the Google click id from an ad, 30 days.
cw_session: keeps you signed in, 30 days. bik_ref: the referral code of a shared link, 90 days. Some product pages set a short-lived unlock cookie of their own.
Google Ads cookies (for example _gcl_au): set by Google only when advertising storage is allowed; Google sets their lifetime (about 90 days).

Change your choice at any time with the Cookie settings link in the footer of every page: it reopens the choice (Accept, Reject, or Settings with one switch for advertising measurement). Deleting the cookies in your browser also resets it.

How long we keep it

Email addresses: while you are subscribed or a member. Unsubscribing deletes the address from that list at once; an unconfirmed signup is never mailed again.
Server logs: 14 days, then deleted.
Purchase measurement records (no email: hashed sale id, product, time, price, click id, consent state): up to 400 days, then deleted. Google Ads only accepts clicks of the last 90 days.
Purchase records at Gumroad: kept by Gumroad as merchant of record under its own policy.
Anonymous beacons: kept as counts for our statistics; they identify no one.
Cookies: the periods listed above.

Your rights

You can ask for a copy of what we hold about you (access), for its correction or deletion, and you can object to its use, including to ad measurement at any time. Email [email protected] from the address concerned; we answer within one month. In the UK you can also complain to the Information Commissioner's Office, in the EEA to your national data protection authority.

We never sell your data. Only the services that make the site run receive it: email delivery (Resend), payments (Gumroad), the network in front of the site (Cloudflare) and, as above, Google for ad measurement.

Clone Watch for rentals

Your listing content: the photos, description and URLs of properties you register, plus mathematical fingerprints of them. This is the product: we compare the open web against these fingerprints.
Evidence of suspected clones: screenshots and page copies of publicly visible pages that match your listings, kept as proof for takedowns. Evidence of confirmed fraud may be retained where retention is legally appropriate.
Checker submissions: URLs submitted to the public checker, and the submitter's IP address for rate-limiting only.

To delete an account, its properties and fingerprints, email us from the account address.

DataWork Watch

If you subscribe to DataWork Watch updates we store your email address and, if you choose to provide them, eligibility preferences (country, work types, languages), used only to match program alerts to you. Unsubscribing (one click, in every email) deletes the address and the whole profile.

Shutdown Watch (/shutdowns)

Followers: we store your email, confirmation timestamps, the events you follow, and (for members) your tool watchlist and an encrypted copy of your license key for re-verification. Unsubscribing deletes the whole profile. Reminder emails (T-30/7/1) are sent only for deadlines you explicitly watch. Members' personal calendar feeds use an unguessable token stored only as a hash; re-activating rotates it, unsubscribing deletes it, and the token never appears in our logs.

Sponsors (Migration Slot): we store the sponsor name, link, pitch, verified transaction amounts/timestamps from Gumroad, and moderation state, kept while the placement is live and in the public bid history afterwards (amounts and relative times only). Sponsor emails are transactional (slot status), capped, and carry List-Unsubscribe; unsubscribing from marketing never blocks activation or receipt emails.

Crawling

Our monitoring only visits public pages, identifies itself, and honors robots.txt; full policy on the bot page.