Privacy
Last updated 29 July 2026
This site sells one look at one number. It needs almost nothing from you, and this page says exactly what "almost" means.
What we keep
- Your payment. Stripe handles it. Your card never touches this site — we never see the number, and we could not store it if we wanted to. What we keep is the fact that a payment succeeded, the amount, and the country your card was issued in.
- Your message, if you leave one, together with the world capital you picked. Not your street, not your GPS: a capital city from a list. It shows publicly on the planet.
- Your email address, only if you buy the rocket or the ufo — because we have to tell you when your claim goes up or is refused. A one-dollar payment does not put your address in our database; Stripe sends you the receipt.
- Your logo, if you upload one. It is a public image on a public site.
- A fingerprint of your IP address when you guess the number, leave a needle, upload a logo or use the contact form — so nobody can brute-force any of it with a script. It is a one-way hash: we can count with it, we cannot read an address out of it, it is coarse on purpose (a whole IPv6 range counts as one), and it is deleted a week after the day it belongs to.
What we do not do
No advertising trackers. No analytics. No cookies for following you around. Nobody is profiled here, and nothing is sold on.
The site keeps a few things in your browser, and none of them is a cookie: a short-lived proof that you paid, good for five minutes, so that a reload does not cost you a second dollar; a longer one, good for a day, that is only ever accepted for planting the needle your dollar bought; the receipt number of your last payment, so a closed tab cannot swallow it; and a copy of what the page last showed — the needles, who owns the rocket — so the world still draws when our server is having a bad minute. They stay on your device, and the proofs leave it only to prove themselves to our own server.
One thing we do not host ourselves: the lettering comes from Google Fonts, so your browser asks Google for those font files and Google sees that request. We ask them for nothing else, and they learn nothing about what you paid, wrote or looked at.
Why we are allowed to
To do what you paid for (Article 6.1.b GDPR: performance of a contract), and to keep the site standing up against abuse (Article 6.1.f: legitimate interest). Your message is published because publishing it is the thing you bought.
Who else sees it
- Stripe — payments. stripe.com/privacy
- Supabase — the database and the uploaded logos, hosted in Frankfurt, Germany.
- Netlify — the site itself and the small server functions.
- Resend — the emails we send you.
- Google Fonts — the lettering, nothing more.
Nobody buys this data, because it is not for sale.
How long
A message lives as long as it is among the hundred newest. When the hundred-and-first arrives, the oldest one is deleted — not hidden, deleted. We do not keep an archive of what people wrote. Guess counters are per day and disposable.
The rocket and the ufo are different, and we would rather say so plainly. Everyone who claims one — whether they flew, are still waiting, or were refused and refunded — stays on a list we keep: name, email address, the line, the place, the logo and what was paid. We keep it because the price of the next turn is worked out from what has been paid before, and because it is how we can still find your claim months later if you ask about it. If you want to be taken off that list, say so through the contact form and we will remove you.
Getting in touch
Ask us what we hold about you, ask us to correct it, or ask us to delete it — the contact form is the way.