blogroll.co.uk

Data controller: Domain Farm Ltd (company no. 13544286), Vantage House, Euxton, UK. ICO registration: [TODO - add ICO registration number once obtained; see DEPLOY.md human gates - do not process real customer payments until this is filled in].

What we collect, and when

Nothing is stored in our database while you're filling in the submission form. Your site name, URL, tagline and amount only reach us as Stripe Checkout metadata, which Stripe holds for the few seconds until payment either succeeds or is abandoned. We only write a database row once Stripe confirms checkout.session.completed.

Once you pay, we store: the site name, URL, tagline and total amount paid (all of this is public by design - that's the entire point of the board), plus - in a separate, non-public payment audit record - your email address, the amount, and the Stripe session/payment reference, for accounting, tax and dispute-handling purposes.

We also keep a short-lived, hashed (not reversible to your IP address) rate-limiting record to stop automated abuse of the checkout endpoint; these rows are deleted after 24 hours.

What we don't do

We do not sell or share your email address with third parties for marketing. We do not email you again after your payment confirmation/receipt (sent by Stripe) unless you contact us first.

Payment processing

All payments are handled by Stripe, who process your card details directly - we never see or store your card number.

Your rights

Under UK GDPR you can ask us what we hold about you, ask us to correct it, or ask us to delete the non-public payment audit record (note: we cannot delete your public board entry without also removing your paid placement, per our terms - no refund is given for a removal you request). Contact hello@blogroll.co.uk.

Last updated: 24 August 2026.