Privacy
Draft: the seller's business details and a legal review are still to be added before launch.
What we record when you visit
The site is a live experiment in how people treat a $1,000,000 button, so it records how visitors behave around it: how long the cursor rests on the button, how close it comes before pulling away, presses, opening and closing the checkout (and how long it stayed open), rapid clicking, and attempts to tamper with the page (for example opening developer tools or editing the price). Each event is stored with the time, your device type (desktop, phone or tablet) and where the connection comes from as our host, Cloudflare, sees it: city, region, country, an approximate location rounded to about 10 km, and the name and kind of network (for example a university, a company, a home broadband or mobile provider).
We do not store your IP address, set cookies, or store anything on your device to track you. Events from one page view share a random id that exists only while the page is open. We do this on the basis of our legitimate interest in running and presenting the experiment, and we keep these events for 90 days.
What other visitors see
The live ticker and counters show anonymous lines such as "Someone from Zurich, Switzerland is hovering over the button right now", with a city and country and, for university or company networks, only that kind of network (never its name). The owner's dashboard, which may be shown in videos about the button, shows the same kind of anonymous information, including the network's name.
Opting out
If your browser sends a Global Privacy Control signal, nothing about your visit is stored or shown to others; you still see everything live.
If you ask to buy the button
We keep what you send (your name, company, email, country, phone, how you would pay, your message and what the button would show) so the owner can reply to you. Only the owner sees it; ask us and we delete it. Everyone watching sees a line like "Someone from Zurich, Switzerland just asked to buy the button": the city and country of your connection, never your name (with Global Privacy Control on, not even that).
If you pay for something
Polish the Button and the Wall of Mockery. Stripe processes the payment under its own privacy policy. A wall post (your name, message and optional link) and the city and country of the purchase are shown publicly around the button.
Buying the button. We keep what you chose for the button (it is public once bought) and the payment reference. Uploads stay private until the payment goes through and are deleted if you don't buy.
Through Escrow.com. We send Escrow.com your name, email and what the button will show, so it can set up the transaction; Escrow.com then checks your identity and handles your payment under its own privacy policy. We keep your name, email and country with the deal, and Escrow.com tells us only how the transaction stands (for example, that your payment is secured).
By crypto. Transactions on a public blockchain are public by nature. We record the transaction, the sending address and the amount, and we may screen the sending address against sanctions lists.
By wire transfer. We keep your name, company, email and country with the reservation, and the proof of funds you upload, which only the seller sees and which is deleted once the reservation is complete or cancelled. Identity checks are done by Stripe Identity: Stripe processes your document and selfie and tells us only whether the check passed.
Contact
[Contact email — to be added.]