Privacy

A square is an advertisement, so everything about it is on the page: the domain, the destination, the line under the name, what has been spent, and how many clicks it has had. Buying a square is a public act.

Visits and clicks are counted using a salted, one-way hash derived from the visitor’s address. This lets the site count recent visitors and avoid counting repeated clicks without storing the address itself. Basic request details, such as the time and referring page, may also be stored. The hash cannot be reversed and is not shared.

No accounts, so no passwords. No cookies for advertising or tracking — the only browser storage is a note of which square you bought, kept on your own device so it can be marked on the wall. No card numbers, no billing addresses: payment happens on Stripe’s own checkout and this site never sees those details.

Stripe processes payments. Supabase stores site data, Vercel hosts the site, and Upstash helps prevent abuse. These providers handle data under their own privacy policies.

Square logos may be retrieved through Google’s public favicon service for display and sharing.

Write to holdit-lol@alexandremarques.io to request a change or deletion where possible. Some hashed records cannot be connected back to a person. Purchase records are kept for as long as required.