What we collect, and what we do not.

One Hour sells sixty minutes of a web page. It needs an email address to send you the link and a way to take $99. That is close to the whole list.

Your email address. Stripe collects it when you pay. We store it so we can send you the link to your hour and, when the hour ends, your receipt.
What you type into the form. Your sentence, your company name, your web address and your X handle. All four are published on the page for the hour you bought, and all four stay afterwards on a permanent page of their own in the archive. That is the product.
Stripe's references for your payment. We never see your card number. Stripe holds the card details; we hold the identifiers that let us take the money, release the hold, or refund you.
Your site's icon. Once, when you fill the form in, we ask your web address for its icon so the page can show it beside your name. We fetch it and nothing else.

What we do not

No cookies. Not one, on any page, including the page you buy from. There is no banner to dismiss because there is nothing to consent to.

No analytics and no third-party scripts. Every page is sent whole from one server. Nothing on this site loads anything from anywhere else, so nobody but us sees that you visited.

Clicks are counted, not traced. When somebody clicks through to a buyer's site we add one to a number. Keeping that number honest means telling one person clicking twice from two people clicking once, so for the length of the hour we hold a scrambled, one-way fingerprint of the connection. Not the address itself, and scrambled with a key that dies when the hour does. It never reaches a disk, it cannot be matched against anything or carried to another hour, and it is gone when the hour is. The number is what is kept.

How long we keep it

Your sentence, your company name and your links come off the homepage when your hour ends and stay, permanently, on your own page in the archive. That is the same four things that were in front of everybody while your hour was running, and nothing else. Ask us and we will take yours down.
Your site's icon is deleted within two hours of that.
The fingerprints that stop one visitor being counted twice are never written down at all. They exist in memory while your hour runs and go when it ends.
Your receipt, which is your sentence, your links, your click totals and your email address, is kept for 90 days and then deleted automatically. The private link stops working at the same time.
Server logs are kept for up to seven days. Email addresses in them are masked to the first character and the domain before they are written.

Stripe keeps its own record of your payment for as long as its rules require, and we cannot delete that for you. It is the same record your bank statement comes from.

Who else handles it

Three companies, each doing one job:

Stripe takes the payment and holds the card details.
Postmark delivers the two emails we send you.
Cloudflare runs the servers the site is on.

Nobody else. We do not sell anything to anyone, and there is no advertising network involved in a page whose entire business model is selling the page.

Your rights

One Hour is run by Stephen Murdoch, trading as Forcepull, in the United Kingdom. Write to hours@onehour.page, which is the same address your receipt comes from.

You can ask what we hold about you, ask us to correct it, or ask us to delete it, and we will.

Deleting a receipt early means losing the click totals it exists to show you, so we will check you meant it before we do.

If you think we have handled your information badly, tell us first, and if that gets you nowhere you can complain to the Information Commissioner's Office.

Last updated 23 August 2026. If this page ever stops describing what the site does, the page is the mistake.