Privacy and cookies

What the purchase needs, and what a card dispute could need later. At checkout, before you go to Stripe, we record the website you entered, your email address, whether you asked for outbid emails, that you ticked the two statements (with the time and the version of the terms), your IP address, a one-way hash of your browser's description and language, the time zone your browser reports (so our emails show times in your zone), and the amounts. If you wrote a business name, a sentence or picked tags, we keep those too. On a board with approval on, we also keep the identifier of the hold Stripe placed on your card and when it lapses.

No. You enter your card on Stripe's checkout page, and we never receive the card number or its security code. What comes back from Stripe can include the name, email address and billing address you gave Stripe, the card's brand, its last four digits, its expiry, the country that issued it and an opaque fingerprint of the card, and a phone number if Stripe asked you for one.

No. We do not sell, rent or share your email address for anyone's marketing, and we send no newsletter or marketing email. Google Analytics runs only after you say yes, with Google Signals and advertising personalisation off. The emails we send are about your payments and your spot, plus outbid emails if you asked for them.

Only those who need it, each for its own job:

• The screen owner whose board you pay on sees your spot and, as the seller, sees your payment in their own Stripe account with the details Stripe collected; the board's Owner and Admins are also emailed your spot's name and website, with its bid and, once it is on the board, its place, each time you pay, or that your card is held for their approval — never your email address. On a board that does not review its spots, its owner can turn these emails off.
• The business whose spot you click or scan receives your visit, as any website does, with three tags in the address naming OnTheList.Live, the board and whether you clicked or scanned. Nothing in them identifies you.
• Stripe processes your payment.
• Amazon Web Services hosts the service in the United States (Northern Virginia), sends our email and scans images before they are shown.
• Upstash runs the queue that drives emails, receipts and the end of each cycle.
• Cloudflare runs the human check on the screen owner's sign-up form and the scorecard form.
• Google runs analytics on some pages, under the rules below, and hosts our mailbox.
• Card networks and banks, through Stripe, if you dispute a charge.
• scrapecreators.com reads the public follower counts of the social accounts a screen owner names on their board.

The privacy policy lists each one and what it receives.

Payments, refunds and disputes are financial records and are kept. The evidence that you agreed to a charge, your IP address and the hash of your browser's description, is blanked after 540 days, about eighteen months, which covers the time a card dispute can be raised. Operational records are kept for 30 days or less, and request counters for at most an hour. The board's Round Archive is permanent: it keeps each settled spot's name and website, never an email address.

What the board shows: your spot's name (the business name you gave, or your website's title or address), your website's address, your sentence and tags, the image or icon, your total and your place. When a cycle ends, the settled standings, with each spot's name and website, stay in the board's Round Archive for good. Your email address is never public.

Only a few, each for a stated purpose (and, for our own staff, a ten-minute cookie while a second sign-in code is entered):

• A session cookie, only once you sign in: one for screen owners and staff, one for advertisers with a sponsor account. They keep you signed in for 7 days at a time.
• otl-consent, only once you make a choice about analytics. It remembers that choice for 12 months (7 days on Safari).
• otl-theme, only if you turn on dark mode with the moon button. It remembers that choice for a year (7 days on Safari), and switching back to light removes it.
• Google Analytics' two cookies, only on the pages and under the rules below.

Our own code sets no advertising cookie and no tracking pixel, and keeps nothing in your browser's local storage. Cloudflare's human check keeps one item of its own in its own frame. The cookie policy lists every cookie with its lifetime.

Only after you say yes, wherever you are. The front page, the scorecard and a board's own pages ask you first, with "yes" and "no" as equal buttons, and nothing is sent to Google until you say yes. With Global Privacy Control turned on and no choice made, you are not asked and nothing loads; a choice you make under "Cookie settings", or made before you turned it on, is the one followed. Checkout, an advertiser's own pages, the legal pages and the screen owner's dashboard never load analytics.

Use "Cookie settings" in the footer of the front page, the scorecard or a board's page. Saying no stops Google Analytics and clears its two cookies from your browser. You can also delete any cookie in your browser's settings. Declining changes nothing about how the site works.

The forms on the front page and the scorecard run Cloudflare Turnstile, a check that tells people from automated traffic. It runs as part of the form whatever you choose about analytics. Cloudflare receives your IP address and signals from your browser while the form is shown; we keep nothing from it.

Yes, by writing to hi@moretime.ai with "Privacy" in the subject line. Requests are free and handled by a person; we aim to answer within a month. You can ask for a copy of what we hold, a correction, or erasure. For records we must keep, such as payments, erasure means replacing the details that identify you with a pseudonym rather than deleting the record, and our answer names the records we keep and why.

No. The service is for adults: everyone who buys a spot affirms they are 18 or older, and screen owners agree to the same. A board aimed at children is not allowed. If you believe a child has given us information, write to hi@moretime.ai and we will remove it.

On systems we run in the United States, in Amazon Web Services' Northern Virginia region. Stripe, Cloudflare and Google handle what they receive under their own terms; the privacy policy says where each holds it.