Privacy Policy

1. Who is responsible for your data

PaidOneDollar.com (the “Service”) is operated by PaidOneDollar.com, a protected series of Lemonberry Labs LLC, a Delaware series limited liability company (“we”, “us”). We are the data controller for the personal data described in this policy. Data collected through the Service is held by this series and is not shared with other series of Lemonberry Labs LLC.

By using the Service, you agree to the collection and use of data described in this policy. If you do not agree, do not use the Service.

Contact for all privacy questions and requests: privacy@paidonedollar.com.

2. What we collect

Information you give us

• Email address. Required to pay and to sign in. It identifies your entry on the leaderboard.
• Title and link. What you choose to show on the leaderboard, including later edits. We also keep the title and link submitted with each payment.
• Amount. How much you choose to pay each time, and the running total and number of payments for your email address.
• Messages. Anything you send us by email.

Payment information

Payments are made on a checkout page hosted by Stripe. Stripe collects your card or other payment details and, to calculate tax, your billing location. We never receive or store your full card number. When a payment completes, Stripe sends our server the checkout session, which includes the name and billing address you entered at checkout. Of that, we store only the session identifier, your email address, and the amount paid. Stripe may also email you a receipt. In our Stripe account we can also see limited details about a payment, such as the cardholder name, card brand, last four digits, and billing country or postal code.

Information collected automatically

• Sign-in records. The first time you sign in, we create an account record containing an identifier, your email address, whether it has been verified, and timestamps. For each sign-in session we store its creation and expiry times, your IP address, and your browser’s user-agent string. Each request for a sign-in link stores a one-time token together with the email address it was requested for, whether or not that address has ever paid. The token is deleted when the link is used; an unused token is deleted some time after it expires.
• Visitor identifier. When you start a checkout, we set a cookie containing a random identifier. It is stored with your payment record, passed to Stripe with your payment, and included in the checkout analytics events described in Section 6.
• Order of payments. Each payment is stored with the date and time and its position in the sequence of all payments made on the Service. We also store the rank your entry held after your most recent payment, so that we can tell you if it has dropped since.
• Usage and device data. Pages viewed, referring page, approximate location derived from your IP address (country and, in Google Analytics, possibly region and city), and browser, device, and operating system type, collected through the analytics tools described in Section 6.
• Server logs. Our hosting provider logs requests to the Service, including IP address, user-agent, and the page requested. Our own error logs can include the email address involved when a payment or an email fails to process.

We do not ask for and do not want sensitive information, such as health data, government identifiers, or information about children. Please do not put any in a title or link.

3. What other people can see

• Title, link, and rank: public. The top 30 entries are visible to everyone on the internet, including search engines. Entries ranked lower are visible only to signed-in users who have paid, who can see the whole leaderboard. Rank order tells anyone who can see two entries that the higher one paid more than the lower one (or the same amount, earlier).
• Total paid: visible to users who paid at least as much. A signed-in user who has paid can see the total of every entry whose total is equal to or less than their own. Your total is not displayed to anyone else, but it can sometimes be calculated: paid users see the sum of all totals (next item), and can subtract the totals they are able to see to get the combined total of the entries that paid more than they did. When only one entry paid more than a user, that user learns its exact total. A paid user who watches the sum change can also learn the size of each new payment, and can often tell which entry made it. We also cannot stop a user who knows your total from telling others. Treat your total as something that may become known.
• Aggregate figures. Signed-in users who have paid can see how many entries there are and the sum of the totals of all entries on the leaderboard. These figures do not name anyone, but the sum can be used as described in the previous item.
• Email address: not displayed on the leaderboard. It is shown in full only to you, when you are signed in.
• Payment confirmation page. The page Stripe sends you to after paying shows your rank, title, the amount of that payment, and a partly masked version of your email address to anyone who has its full web address. That address contains a long random identifier issued by Stripe. Google Analytics receives this web address when the page loads, and Vercel’s analytics may too (Section 6). Do not share the address of that page if you want the amount kept private.

Titles and links may be copied, cached, or archived by search engines and other third parties. If you change or remove your entry, copies outside the Service may remain.

4. How we use your data, and the legal basis

Where the GDPR or UK GDPR applies, we rely on the legal bases named below. Giving us your email address, title, link, and amount is required to make a payment; without them we cannot create an entry.

• To provide the Service (performance of our contract with you): take payments, create and rank your entry, show your title and link publicly, show totals to the users entitled to see them, sign you in, and let you edit your entry.
• To send service email (performance of contract): one-time sign-in links, including the one sent automatically after each payment made without being signed in, and replies to your messages. We do not send marketing email.
• To keep the Service safe and lawful (legitimate interests in preventing abuse and fraud): screen titles and links for prohibited content, limit the rate of sign-in requests, investigate reports, handle disputed payments, and enforce our Terms.
• To understand and improve the Service (consent for analytics cookies; legitimate interests for cookieless measurement, the visitor identifier, and server-side checkout events): count visits, measure page performance, and measure how many checkouts start and complete.
• To meet legal obligations (legal obligation): keep tax and accounting records, and respond to lawful requests.

We do not use your data for advertising, and we do not build profiles of you beyond what is described here.

5. Automated screening of titles and links

When you submit or edit a title and link, we send those two pieces of text to an automated moderation model operated by OpenAI. Your email address and payment details are not sent. If the model flags the text, the submission is rejected and you are asked to change it; nothing is charged. OpenAI states that content sent to this moderation service is not used to train its models.

This is an automated decision, but its only effect is that a particular title or link is not accepted. If you think it got it wrong, email privacy@paidonedollar.com and we will review it.

6. Cookies, local storage, and analytics

Cookies and storage other than analytics

• Sign-in cookies. Strictly necessary. Set when you sign in, to keep you signed in. A session ends no later than 90 days after you last used it, or when you sign out.
• Visitor identifier cookie (userId). Used for measurement. It is set when you start a checkout and kept for one year. It contains a random identifier and is not readable by scripts in your browser. You can delete it in your browser at any time.
• Cookie choice (cookie-consent). Strictly necessary. Stored in your browser’s local storage to remember whether you accepted or declined analytics cookies.
• Stripe. Stripe’s checkout page is on Stripe’s own domain and sets Stripe’s own cookies, which Stripe uses to process payments and prevent fraud.

Google Analytics

• Before you choose, and if you decline: the Google Analytics script loads with all storage consent set to “denied”. It sets no analytics cookies. It still sends Google cookieless signals when pages load, containing information such as the page address, referrer, browser user-agent, and a timestamp, with no identifier that persists between visits. As with any web request, Google receives your IP address when your browser contacts it.
• If you accept: Google Analytics sets cookies (_ga and _ga_<ID>, lasting up to two years) that give your browser a random identifier, so that repeat visits can be recognized. Accepting also sets Google’s advertising-related consent signals (ad storage, ad user data, and ad personalization) to “granted”. The Service shows no ads and we do not use this data to target advertising.
• Checkout events, sent from our server regardless of your cookie choice: when you start a checkout and when a payment completes, our server sends Google Analytics an event containing the amount, the Stripe checkout session identifier, the visitor identifier described above, and your Google Analytics identifier if you have one (otherwise a random one-time value). These events do not include your email address, title, or link. The session identifier is the same one that appears in the address of your payment confirmation page (Section 3).

You can change your cookie choice by clearing this site’s data in your browser, which makes the banner appear again. You can also block Google Analytics in all cases with Google’s opt-out browser add-on or a content blocker.

Vercel Web Analytics and Speed Insights

These run for all visitors and do not use cookies. Web Analytics counts page views; Vercel recognizes a visitor within a single day using a hash derived from the request, which is discarded daily, so visitors cannot be followed from day to day or across sites. Speed Insights records page-load performance figures together with the page address, browser, device type, and country, not tied to an individual visitor.

“Do Not Track” and Global Privacy Control

The Service does not currently change its behavior in response to “Do Not Track” or Global Privacy Control browser signals. Google Analytics cookies are off unless you accept them. No third-party advertising or social media trackers are present on the Service.

7. Who we share data with

We do not sell your personal data. We share it only with the service providers below, each for the purpose stated, and otherwise only as described at the end of this Section.

• Stripe (payments and tax calculation): your email address, the amount, your title and link (they appear as the description of your purchase), the visitor identifier, and your Google Analytics identifier if you have one. Stripe collects your payment details directly, and also acts as an independent controller for its own purposes such as fraud prevention and regulatory compliance. See Stripe’s privacy policy.
• Vercel (website hosting, server logs, Web Analytics, Speed Insights): all traffic to the Service passes through Vercel.
• Neon (database hosting): stores the records described in Section 2.
• Resend (email delivery): your email address and the content of the sign-in emails we send you.
• Google (Google Analytics): the analytics data described in Section 6.
• OpenAI (content moderation): the title and link you submit, and nothing else.

We may also disclose data:

• when the law, a court order, or another binding legal process requires it;
• to establish, exercise, or defend legal claims, or to investigate fraud or abuse of the Service;
• to a successor or buyer if the Service is sold, merged, or reorganized, in which case this policy continues to apply to data already collected until you are told otherwise.

8. International transfers

We are based in the United States, and our service providers process data in the United States and other countries. If you are in the EEA, the UK, or Switzerland, your data is transferred to countries whose data protection laws differ from yours. Where required, these transfers rely on safeguards put in place by our providers, such as the EU-U.S. Data Privacy Framework or standard contractual clauses. Email us if you want more information about them.

9. How long we keep data

• Your entry (email address, title, link, total): for as long as the Service operates, or until you ask us to delete it.
• Payment records (email address, amount, date, Stripe session identifier, visitor identifier, submitted title and link): for as long as tax, accounting, and payment-dispute rules require, even if you ask us to delete your entry. When you ask for deletion, we remove or de-identify what we are not required to keep.
• Sign-in sessions: a session ends no later than 90 days after you last used it, or when you sign out. Signing out deletes the session record. Records of expired sessions may be kept for security and abuse prevention. One-time sign-in links stop working after 30 minutes.
• Cookies: as stated in Section 6.
• Analytics and logs: for the periods those services apply. Google Analytics keeps event-level data for no more than 14 months.

10. Security

The Service is served over encrypted connections. Sign-in uses one-time links instead of passwords, and sign-in cookies cannot be read by scripts in the browser. Amounts you are not entitled to see are not sent to your browser (but see Section 3 on how a total can sometimes be calculated). Card numbers are handled by Stripe and never reach our servers. No system is perfectly secure, and we cannot guarantee the security of your data. Anyone who can read your email can sign in to your entry, so protect your email account.

11. Your rights and choices

You can do the following yourself:

• Change your title or link: sign in and edit them on the My spot page.
• Decline Google Analytics cookies: use the cookie banner (see Section 6).

For anything else, email privacy@paidonedollar.com from the email address of your entry so that we can verify the request. Whatever your location, you may ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is inaccurate;
• delete your data. Deleting your entry removes it from the leaderboard permanently and does not entitle you to a refund. We keep payment records we are required to keep (see Section 9).

We respond within the time the law requires.

EEA, UK, and Switzerland

You also have the right to restrict or object to processing that is based on our legitimate interests, to withdraw consent at any time (which does not affect processing that already took place), to receive the data you gave us in a portable format, and to have a person review an automated decision (see Section 5). To object to the cookieless measurement, the visitor identifier, or the server-side checkout events described in Section 6, email us. You may lodge a complaint with the data protection authority where you live.

California and other US states

We do not sell personal information, and we do not use it to advertise to you. We do not knowingly collect sensitive personal information. The categories of personal information we collect, the purposes, and the categories of recipients are listed in Sections 2, 4, and 7. You may ask to know, correct, or delete your personal information as described above, and we will not treat you differently for making a request.

12. Children

The Service is for adults. You must be at least 18 to pay or sign in. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email privacy@paidonedollar.com and we will delete it.

13. If someone used your email address, or you paid before the leaderboard

Someone else paid with your email address. We do not verify an email address before a payment. If someone enters yours at checkout, an entry is created under it and you receive a sign-in email from us. Only you can sign in to that entry. If you want it removed, email privacy@paidonedollar.com. Separately, anyone can type any email address into the sign-in form, which sends a sign-in link to that address. If you receive one you did not request, you can ignore it; it expires after 30 minutes.

You paid before the leaderboard existed. PaidOneDollar.com used to sell something simpler: you paid to see how many people had paid. When the leaderboard launched, we created an entry for each email address that had paid, credited with the amount paid, under a placeholder title such as “Early payer #12” and with no link. The placeholder does not reveal your email address or name. You can sign in to change the title and add a link, or email privacy@paidonedollar.com to have the entry removed.

14. Changes to this policy

We will update this policy when what we do with data changes. The new version will be posted on this page with a new date at the top. By continuing to use the Service after a change, you agree to the updated policy.

15. Contact

PaidOneDollar.com, a protected series of Lemonberry Labs LLC. Email: privacy@paidonedollar.com.