Privacy
Effective November 5, 2026
Your contribution is private by default. We collect only information used to operate the experiment, verify contributions, prevent abuse, and respond to you.
Who runs this
The $1 Experiment is a personal project operated by the organizers reachable at the contact email below. Contributions are for the organizers’ personal use.
What we collect
- For the optional listing form: your contribution amount, optional email, chosen alias (only if you opt in), consent choice and time, unique submission reference, and any referral code in the link you used. Direct payment links collect no form data on this site. The organizer may record a verified direct payment privately using its amount and hashed transaction and payer identifiers.
- Payment verification status, verification dates, a hashed transaction identifier to prevent duplicate counts, and a hashed payer identifier to group consenting contributions on the leaderboard. Raw payment identifiers entered by the organizer are not retained in our database.
- If email importing is enabled, a limited excerpt, subject, received date, and Gmail message identifier from Venmo notifications are stored in a private organizer review inbox. The checker reads the receipt body privately to match the experiment note, amount and transaction ID. Matching events update the aggregate. Names and excerpts stay private. No attachments or full message bodies are imported.
- A hashed private receipt key, and a record of moderation and visibility changes.
We do not collect card numbers, bank details, or payment credentials. Venmo handles the payment separately under its own policies. Choose your payment privacy settings in Venmo; this website cannot change them.
What becomes public
Using the exact note “$1 Experiment | public: YourAlias” opts in to publishing that alias and gift amount. The plain “$1 Experiment” note counts only toward the aggregate. Contact the organizer to hide a public receipt alias.
Aggregate verified amounts and the number of verified contributions are public. Individual amounts and your chosen alias appear in the recent feed and donor leaderboard only when you opt in. Contributions from the same verified payer are grouped on the leaderboard; if you used different public aliases, one of those aliases is displayed for the group. Emails, payment identifiers, private receipt keys, and referral attribution are never exposed by the public ledger.
Change your mind
Use your private receipt link to remove your public alias and individual amounts. Your verified contribution will remain in aggregate totals. To request access, correction, deletion, or help with visibility, contact the organizer with your submission reference. We may ask you to confirm ownership before disclosing or changing private records. We aim to respond within 30 days.
Storage and retention
Records are stored in Cloudflare D1. Email notification subjects and excerpts are retained for up to 90 days, then removed during organizer maintenance. Pending or rejected records are retained for up to 90 days, then removed during organizer maintenance. Verified and reversed records are retained while the experiment operates and for up to 12 months after it ends for reconciliation, unless a longer period is required by applicable obligations. The organizer must perform scheduled retention maintenance; this website does not promise immediate deletion from provider backups.
Service providers and security
Cloudflare hosts the site and database. Its Turnstile service processes information such as IP address and browser signals to prevent automated abuse when contribution forms are open. Hosting providers may process request logs for security and operation. A Work-hosted private edition also uses the hosting platform’s sign-in and access controls. An administrator key protects private contribution records. No system can promise absolute security.
Sharing and messages
Sharing generates a random referral code in a link. We estimate unique homepage visitors using a random first-party browser identifier in local storage. We keep its salted hash, first visit date, and optional first referral code for the duration of the experiment. The organizer sees aggregate counts. The counter skips browsers that signal Do Not Track or Global Privacy Control. Clearing site storage or switching devices can change the estimate. Contribution addresses are used for contribution-related support.
Optional project emails
Adults can separately sign up for project emails. Your signup email triggers a private confirmation link that expires after 24 hours. Once you confirm, we store your email address, the consent wording and version, request and confirmation times, and a fingerprint of the signup message ID in Cloudflare D1. Subscribers agree to project updates and occasional requests for voluntary personal contributions. We record delivery outcomes, bounces, complaints, and unsubscribes. Every campaign email will include an unsubscribe link. We retain suppression records to honor opt-outs and prevent repeat delivery to bounced addresses. You can also contact hello@theonemilliondollarproject.org for help.
Children and changes
This experiment is intended for adults aged 18 or older. Do not submit another person’s details without permission. If this notice changes, the effective date above will change; permission already given will not be expanded automatically.
Contact: angorasmentoras0c@gmail.com