A board of names is a privacy question wearing a joke's clothing. Here is exactly what is kept, by whom, and for how long.
Controller for payonebuck.lol: Sebastian Hofer, Eupenerstraße 165, 50933 Köln, Germany · contact@payonebuck.lol
Last updated 3 September 2026.
No cookies. No analytics. No tracking pixels. No advertising. Nothing about you is sold or shared with anyone. The one third party in the transaction is Dodo Payments, which takes the payment and is the seller of record on it; a hosting company keeps ordinary connection logs, and this server visits the link you submit. All three are described below.
The part that matters most is the opposite of hidden: what you type goes on a public page on purpose.
If you pay, these go on the board where anyone can read them:
This is the product, so it is public indefinitely, readable without an account, and reachable by search engines and anyone who copies the page. Put a name on it only if you want that name found there.
Payment runs entirely on Dodo Payments' own hosted page. Your card number, your email address and your billing details are given to Dodo Payments, not to this site — they never pass through this server and are never stored here.
Dodo Payments is the merchant of record for this site, which means it is the seller on your receipt rather than a processor acting on our instructions. For your payment data it is therefore an independent controller in its own right, not a processor of ours: it decides how that data is handled, for payment processing, fraud detection, risk analysis, sanctions screening and its own tax and regulatory obligations. By its own policy it collects your name, contact and billing details, purchase and card payment identifiers, and technical data such as your IP address, device and browser.
Dodo Payments transfers that data to recipients in other countries, and where those are outside the UK/EEA and not in an adequate jurisdiction it does so on the basis of Standard Contractual Clauses. The detail, including which of its entities are controllers and how long it keeps things, is in Dodo Payments' privacy policy. If you want your payment data corrected or erased, Dodo Payments is who holds it — ask them, not us. We can only act on the listing, which is section 12.
The name and link are typed on this site's own form, not on Dodo Payments' page. They are passed to Dodo Payments with the payment so they can be handed back when it completes, and what comes back is small: the payment's identifier, the amount, and those two values.
One database, on one server. For each buck:
meta tagsNo email address, no card data, no billing address, no IP address, no device or browser fingerprint, no profile of any kind.
No cookies are set, for anything. The page keeps two small values in your browser's localStorage, which never leave your device and are never sent anywhere:
| Key | What it does |
|---|---|
pob.view | which board you were last looking at, All time or Today |
pob.mine | the buck numbers bought from this browser, so your own row can be pinned above the board |
pob.theme | light or dark, if you have used the toggle. Untouched, the site follows whatever your device is set to |
pob.clicked | the listings this browser has already clicked, so a click is counted once instead of every time |
Clearing your browser's site data removes both. The board still works without them; you simply lose the pin and the remembered tab.
Each listing shows how many people have clicked through to it. That number is counted once per browser, and the deciding is done in your browser, not here: the page keeps a list of the listings you have already clicked (the pob.clicked value above) and only tells the server about the first one.
This is the whole reason it works that way. Counting unique clicks on the server means keeping something that identifies you — an address, a hash of one, a fingerprint — and that would be a profile whatever it was called. What this server receives is a buck number and nothing else. It does not learn who clicked, what else they clicked, or that two clicks came from the same person.
The honest trade: clear your site data and you could be counted again. A number that is roughly right is worth more than a record of who read what.
The typeface is served from this site rather than a font CDN. There is no analytics script, no advertising script, and no third-party script of any kind.
One exception, and it is worth reading. Each listing shows the favicon of the site it links to, loaded from that site rather than copied here. So when you look at the board, your browser requests an icon from each of the linked sites on the page, and those sites can see that request — your IP address, and roughly when. They are not told which page you were on: the requests are sent with no-referrer. No favicon service is involved and nothing is loaded from an advertising or analytics network; these are requests to the ordinary websites people paid to link to.
The share buttons on the receipt are ordinary links to X, WhatsApp and Telegram. Nothing is loaded from them, and nothing is sent to them, unless you click.
When a link is submitted, this server may visit it — to follow a shortener to its destination, and to read the page's own meta tags for its favicon and its one-line description. That is one request, made once, and it happens whether or not anybody is looking at the board. It comes from this server's address, not from any visitor's, so submitting a link never announces the person who submitted it.
This application's own logs record payment identifiers and buck numbers so that problems can be traced — not visitors. The company hosting the server will keep its own connection logs, typically including IP addresses, for a short period and for security purposes. That is standard for any website and outside this application's control.
The listing is kept indefinitely: a permanent public board is the thing being sold, and a board that quietly emptied itself would not be one.
Payment identifiers are kept for as long as the listing, because they are what keeps a payment from being counted or refunded twice. The payment records themselves — and the tax records that go with them — are held by Dodo Payments as merchant of record, for as long as its own obligations require; its retention is described in its privacy policy. The operator keeps the commercial records German law requires him to keep, which is several years.
Under the GDPR: publishing your listing and taking your dollar is performance of the contract you entered by paying (Art. 6(1)(b)). Keeping the payment identifier to prevent double-counting and double-refunds, and filtering links for abuse, are legitimate interests in running the thing honestly (Art. 6(1)(f)). The name and link are typed by you, knowing they go on a public board, so publishing them rests on what you chose to enter.
You can ask for a copy of what is held about you, for it to be corrected, for it to be erased, for it to be restricted, or for a machine-readable copy — and you can object to processing based on legitimate interests. Write to contact@payonebuck.lol and say which buck number is yours.
Erasure is honoured: the listing comes off the board. The payment identifier may be kept, on its own, where it is still needed to stop that payment being processed again or to meet a legal retention duty. Removal does not refund the dollar.
If you think this is being handled badly you can complain to a data protection supervisory authority — normally the one where you live or work, or the one responsible for us, which is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de).
This is not for children. Do not pay, and do not put a name on the board, if you are under 16 — or under whatever higher age applies where you live — without a parent doing it.
If this page changes, the date at the top changes with it. There is no mailing list to notify, because there are no email addresses to notify it with.