Privacy Policy
1. Who is responsible
Own The Button is operated under the trading name JOTLYO Projects. The operator is responsible for the personal information described here.
For privacy requests, contact heyjotlyo@gmail.com.
This policy describes what the Service actually processes. It does not describe practices we do not have.
2. What we process
When you complete or attempt a takeover:
- the display name you choose, which is public;
- the destination address you submit;
- an email address, only if you voluntarily provide one when asking for manual review of a destination we could not verify automatically;
- the status, amount, currency and provider identifiers of your transaction, and the payer information PayPal makes available to us, which typically includes a payer identifier and the email address and name on the PayPal account;
- the record of your takeover: display name, amount, when it began and ended, and how many times the button was pressed while it was current;
- the fact and content of any abuse report, copyright notice or cancellation request you send us, and our correspondence about it.
For security and to prevent abuse:
- we derive a salted, keyed hash from your IP address and store that hash with an hourly counter, so that we can limit how often one source can trigger expensive checks. Your IP address is necessarily processed in order to compute the hash and by our infrastructure provider in order to deliver the request to us; what we store is the hash, not the address;
- we record whether a human-verification challenge was passed;
- we record the outcome of safety checks and the reason a request was refused.
When a destination is checked, we process information about the destination itself, which may include personal information if the destination contains any:
- the address, the addresses it redirects through, and the final address;
- DNS resolution results and network-level metadata;
- HTTP response metadata such as status, content type and content disposition;
- text and links visible on the page when loaded;
- reputation verdicts from third-party providers;
- classifications produced by automated analysis;
- hashes of page content, used to detect later changes.
Where a destination needs deeper inspection, it is loaded in a browser and a screenshot is captured in memory and sent for automated analysis of explicit content. This does not happen for every destination: an address already covered by our reputation data, or an established platform profile, is decided without loading or analysing it. Raw screenshots are not intentionally persisted; what we keep is the classification result and, where applicable, a hash.
3. What is public
The ownership history shown on the site displays, for each takeover: the display name, the amount paid, how long it was current, and the number of times the button was pressed while it was current.
The destination address is not displayed in the history or in any public interface. However, while a takeover is current, pressing the button necessarily sends the visitor to that destination, so the destination becomes apparent to anyone who presses it. Do not submit an address you need to keep confidential.
Choose a display name you are willing to have published. Do not use someone else's name, and do not include personal information in it.
Abuse reports, copyright notices and cancellation requests are never published and are not exposed through any public interface.
4. Why we process it, and on what basis
- To provide the takeover you asked for, and to take payment for it — performance of our contract with you.
- To review destinations for safety and legality, to prevent abuse, and to protect the Service and its visitors — our legitimate interests, and compliance with legal obligations.
- To keep transaction, accounting and tax records — compliance with legal obligations.
- To handle abuse reports, copyright notices, cancellation requests, disputes and legal claims — legal obligations and legitimate interests.
Providing the information we ask for is voluntary, but we cannot provide a takeover without it.
5. Who processes it for us
We use service providers who process information on our behalf:
- Cloudflare — hosting, delivery, database, human verification, and the browser used to load destinations for review;
- PayPal — payment processing. PayPal is an independent controller of the payment information it holds, under its own privacy policy;
- Google Cloud — reputation lookups on addresses, and automated analysis of destination content;
- Resend — transactional email delivery, used to send the confirmation for a completed takeover;
6. International processing
We operate from Israel. Our service providers operate globally, so information may be processed in countries other than your own, including the United States.
Where information is transferred out of a jurisdiction that restricts such transfers, we rely on the transfer mechanisms our providers make available, including standard contractual clauses where applicable. We do not claim any certification, adequacy finding or scheme membership that we have not verified.
7. Automated decision-making
Whether a destination is accepted is decided in part automatically.
- Some refusals are deterministic. An address that is not https, resolves to a private network, forces a download, or matches a reputation provider's threat verdict is refused by a fixed rule, not by a judgement.
- Some outcomes are probabilistic. Automated classification of page content can produce an outcome of “needs review” or “could not verify” rather than an acceptance or a refusal.
- Where a destination is refused because we could not verify it, rather than because it failed a deterministic check, we offer you the option to ask for human review. Where that option is offered it is shown to you at the time.
- A refusal does not charge you. No payment is taken for a takeover that is not activated.
8. How long we keep it
These periods describe what the Service currently does:
- Rate-limit hashes and counters
- approximately 2 hours
- Abandoned checkouts
- closed after approximately 24 hours
- Scratch data for finished checkouts
- approximately 7 days
- Detailed scan telemetry
- approximately 90 days
- Scans kept as reviewed ground-truth labels
- longer, as a small reference set
- Raw screenshots
- not intentionally retained
- Ownership history
- for as long as the Service operates
- Payment, accounting, tax, fraud, dispute and legal records
- as long as required by law or to establish, exercise or defend legal claims
9. Your rights
Depending on where you live, you may have rights to access the personal information we hold about you, to have it corrected, to have it deleted, to restrict or object to our processing of it, to receive a copy in a portable form, and to complain to your data protection authority. To make a request, write to heyjotlyo@gmail.com.
We will respond within the period applicable law requires. We may need to ask for information sufficient to identify you and the transaction concerned.
We cannot delete information we are required to keep, or that we need in order to establish, exercise or defend a legal claim, to complete or evidence a transaction, to comply with accounting, tax or anti-fraud obligations, or to keep the Service secure. Where that applies we will tell you, and delete the rest.
10. Children
The paid Service is for adults. You must be at least 18 to complete a takeover. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, write to the privacy contact above and we will delete it.
11. Security
We use transport encryption throughout, we do not store payment card details, we store rate-limiting identifiers only as salted keyed hashes, and we do not retain raw screenshots of destinations. No service can promise perfect security.
12. Changes
The version and effective date of this policy are shown at the top of this page. Where a change is material we will make it apparent on the site.
A JOTLYO Projects experiment.
For business or legal information, contact heyjotlyo@gmail.com