Privacy Policy

Effective August 27, 2026. Last updated August 27, 2026.

This policy explains what DollarPost (https://www.dollarpost.lol) collects when you visit the site or pay for a post, why, and what happens to it. It sits alongside the Terms of Service.

Who is responsible

The controller for personal data processed through the Service is Web Window OÜ, a company registered in Estonia. Contact: a direct message to @DollarPostLOL on X.

What we collect

The Service is deliberately small. Visitors browse without an account, and we collect only what publishing and payment need:

• Your post. The text you write and any picture you upload, from the moment you start checkout. This content is intended for publication and becomes public if the post publishes.
• Payment confirmation data. Stripe processes the payment and tells us the outcome: checkout session and payment identifiers, the amount, and the email address you gave Stripe. Card numbers never touch our servers. Stripe’s own privacy policy applies to the checkout itself.
• Abuse-prevention counters. Your IP address feeds short-lived rate-limit counters so one visitor cannot flood checkout or uploads. The counters hold a key and a number, reset within minutes, and are not used to profile you.
• Technical logs. Our hosting provider processes standard request data (IP address, user agent) to run and secure the site, retained briefly in server logs.
• Messages you send us. If you contact us, we keep the correspondence as long as needed to respond and to keep a legal record.

Cookies and tracking

Visitors get no cookies at all. The only cookie the site sets is a login cookie for the site operator’s own admin area. Visits are measured with DataFast, a cookieless analytics service: it counts page views and referrers in aggregate, sets no cookies, and builds no cross-site profiles. There are no advertising trackers and no third-party embeds.

Why we use this data

• Contract: to take payment, publish your post, and show its status to you.
• Legitimate interests: to prevent abuse (rate limits, content screening), review picture posts before publication, keep the public wall running, debug outages, and defend legal claims. You may object to processing based on legitimate interests.
• Legal obligation: to keep tax and accounting records where the law requires it.

Published posts are public

A published post appears on X under the @DollarPostLOL account and on this site’s public wall together with the price paid. Anyone can see it, including search engines. Posts are attributed to the account, not to you, and we do not publish your name or email. Do not put personal data in a post: the Rules forbid it, and posts are permanent by default.

Who we share data with

• Stripe processes payments and card authorizations.
• X Corp receives the content of published posts (that is the product).
• Vercel hosts the site and stores uploaded pictures. Neon hosts the database that holds posts and payment references.
• Telegram delivers the operator notification for picture posts awaiting review; that notification contains the submitted text and picture.
• DataFast provides cookieless, aggregate visit statistics.
• Professional advisers or authorities, where we must share data to comply with law or enforce the Terms.

We do not sell personal data. Some processors are outside the European Economic Area; where we rely on them, transfers are covered by appropriate safeguards such as standard contractual clauses.

How long we keep it

• Published posts stay as long as they are live on X and the wall.
• Pictures from rejected or abandoned posts are deleted.
• Payment records and their identifiers are kept as long as tax, accounting, fraud, and dispute handling require.
• Rate-limit counters reset within minutes; server logs rotate on our host’s standard schedule.

Your rights

If the GDPR or a similar law applies to you, you may ask us to access, correct, delete, or export personal data we hold about you, to restrict or object to certain processing, and to withdraw consent where processing was based on consent. Reach us via a direct message to @DollarPostLOL on X. We may need enough information to find your data (for example the payment email or the post link). You may also complain to a supervisory authority, including the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the authority in your country of residence. Note that a published post is public on X, and deleting our copy does not remove what others may have reshared there.

Children

The Service is for adults. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete what we can identify.

Changes

We may update this policy when the Service or the law changes. The date at the top of this page is the current version.