Privacy

The short version

No tracking cookies, no advertising network, no analytics script, and no IP addresses in our database. We store what a listing needs to exist, an email address if you give us one, and counters that are deliberately built so they cannot be traced back to a person.

What is public on purpose

Everything in a listing is published: your display name, tagline, link, image and the price you paid. So is the ownership history of every word — who held it, for how much, and what it sold for next.

That history is permanent. Losing a word does not remove your name from it, and neither does asking us to; the record of what a word has sold for is the thing everyone else is pricing against, and a market with an editable past is not one you could trust. If you would rather not appear under your own name, use a company name — the display name is yours to choose and nothing checks it against your email.

What you hand over to bid

A display name, and optionally an email address. The email is used for three things and nothing else: confirming a claim and carrying your manage link, telling you when someone has taken your word, and confirming an automatic refund. There is no newsletter, and we do not sell or share the list.

The manage link in that email is the only key to your listing. We store it hashed, which means we cannot read it, and cannot reissue it if you lose it.

Card details go to Stripe and never reach this site — we see the result of a payment, not the instrument. Stripe keeps what it needs under its own privacy policy.

What we measure

Owners are sold a click count, so clicks have to be counted, and counted in a way that cannot be inflated. Your IP address and browser string are mixed with a secret and a rotating 30-minute time window into a one-way hash. That hash is what gets stored — never the IP itself — and because the window rotates it cannot be used to follow you from one day to the next.

The “N looking at this word” figure works the same way, with one row per visitor overwritten in place and deleted within the hour.

Outbound links carry a utm_source tag so an owner can see our traffic arrive in their own analytics rather than take our number on faith. Where that link goes afterwards is between you and them.

Cookies

One, and only for us: a signed session cookie set when an administrator logs in to review listings. Visitors are set no cookies at all, which is why this site has no consent banner to click through.

Who else touches it

Stripe for payments, Resend for the three emails above, Upstash for the abuse limits, and our hosting and database providers. Your IP is visible to those last ones as it is to any website you visit, and is held briefly in a rate-limit counter so that one person cannot flood the bidding endpoint. It is not logged into the database and not used for anything else. These providers process data in the United States and the European Union.

Asking us to delete something

Write to hello@ownaword.lol and we will remove your email address and blank the personal details on a listing. What we cannot do is rewrite the price history, for the reason above, or unwind a payment record Stripe is required to keep. You can also ask for a copy of what we hold, which is a short list.

Children

This is a paid service for people 18 and over. We do not knowingly collect anything from anyone younger.

Changes

If this page changes in a way that affects what we collect, the change applies going forward, not retroactively to data already gathered under the old version.