Privacy Policy

Information we may process

Visitors

We may process technical information such as IP address, browser and device information, request timestamps, security and risk signals, session identifiers, referrer data and page activity. We may use this for security, rate limiting, bot filtering, qualified-impression measurement, fraud prevention and technical operation.

Builders and bidders

When you participate, we may process email address, submitted URL, project identity, country/city, generated Billboard content, category, bid history, private maximum bids, public effective bids, auction status, payment-provider identifiers and FirstLook run history. Your private maximum is not displayed publicly.

Payment information

Payments are handled by our payment provider. We may receive transaction references, authorisation status, amount, currency, customer or payment-method references and settlement status. We do not need to store complete payment-card numbers.

Generated Billboard content

When you submit a project URL, we may retrieve publicly available information such as page titles, descriptions, logos, favicons, screenshots, Open Graph data, public company information, public social or profile URLs, project location clues and externally visible product metrics. We use these to create and verify your FirstLook.

Usage metrics

We may record Billboard impressions, outbound project visits, timestamps, session identifiers and anti-abuse signals. We may use hashed or otherwise reduced identifiers where appropriate to limit duplicate or artificial activity.

Communications

If you contact us, we process the information you provide so that we can respond, investigate issues and keep appropriate business and legal records.

Why we process information

Depending on the activity and applicable law, processing may be necessary to:

• provide the service you requested;
• administer payments and auctions;
• generate and publish your FirstLook;
• operate archives;
• prevent fraud and abuse;
• secure FirstLook;
• measure the performance of a paid run;
• comply with legal, tax, accounting or regulatory obligations;
• communicate with you about your bid or run;
• send optional marketing only where appropriately permitted.

Public information

FirstLook is intentionally public. If your project wins or appears in an archive, information such as project name, visual, description, URL, location, category, public proof signals, winning amount, hold duration, qualified impressions and outbound visits may be visible to anyone. Search engines may index public archive pages.

Do not submit a project if you are not authorised to make this information public.

Cookies and local storage

A small number of cookies and equivalent browser storage keep the Service working: an edge-security cookie that blocks automated abuse, storage that keeps you signed in, and the state of your current bid. These are set as soon as you use the site.

Two more are not strictly necessary, and the confirmation bar shown on your first visit asks about them: a visitor-counting cookie behind the “Online now” and “Visitors today” figures, and first-party analytics that measures how quickly pages load and how the site is used. Both are served from this site's own address rather than from an advertising network, and neither follows you across other websites. Error monitoring also records how a page behaved when something on it broke.

Choosing Decline keeps the visitor-counting cookie and our own analytics heartbeat from running. The essential security and sign-in cookies remain, because the Service cannot operate without them. Your choice is remembered in your browser, and clearing site data for this domain brings the question back. To change or withdraw a choice, write to hello@firstlook.buzz.

Service providers

We may use service providers for payment processing, hosting and database infrastructure, edge security and CDN, AI processing, screenshots and crawling, email delivery, analytics and fraud/security services.

Cross-border processing and third-party destinations

FirstLook.Buzz may use service providers located in, or operating infrastructure from, countries outside the United Arab Emirates. Where FirstLook itself transfers personal data through such providers, we will take reasonable steps required under applicable law to use appropriate contractual, organisational or technical safeguards.

FirstLook also processes information made available through project URLs, websites and public profiles submitted by users. You are responsible for ensuring that you are authorised to submit that destination and that the information made available through it may lawfully be accessed, processed and displayed in connection with FirstLook.

Before submitting a project, review the destination and make sure it does not expose personal, confidential, regulated or third-party information that you are not authorised to make available for this purpose. If you are uncertain, do not submit the project until you have carried out the appropriate review or obtained any required permissions.

When visitors leave FirstLook.Buzz and access an external project website or third-party service, the collection, use, storage and international transfer of information by that destination is governed by the destination operator’s own privacy practices. FirstLook does not control those independent processing activities.

By submitting a URL or project, you confirm that you have reviewed the information made publicly accessible through that destination and have the authority to permit FirstLook to retrieve, analyse, display and otherwise process that information for the operation of the Service. Do not submit URLs containing confidential information, restricted personal data, private customer information or other material that is not intended for public access.

Retention

We keep information only as long as reasonably necessary for its purpose. Examples:

• authentication tokens: short-lived;
• security and rate-limit data: limited operational periods;
• project and run records: while required to operate public archives and legitimate business records;
• payment and invoice records: as required for accounting, tax, fraud and dispute handling;
• support and legal correspondence: while needed to resolve the matter or preserve legal records.

Backups may retain deleted information for a limited additional period.

Your rights

Subject to applicable UAE law, you may have rights relating to access, correction, deletion, restriction of processing, objection, obtaining information about processing and transfer/portability in applicable circumstances. To make a request, email hello@firstlook.buzz. We may need sufficient information to verify your identity and locate the relevant data.

Security

We use reasonable technical and organisational measures intended to protect personal information, including secure transport, access controls, infrastructure protections, fraud monitoring and separation of sensitive services. No internet service can guarantee absolute security.

Children

FirstLook is intended for adults who are capable of entering binding commercial transactions. We do not knowingly invite children to bid for paid placements.

Changes

We may update this Privacy Policy as FirstLook, our providers or applicable laws change. The date shown at the top identifies the current version. See also our Terms of Service.