Somebody buying an ad normally leaves a trail with several owners: a card network, a processor, an invoicing system, a billing address. None of that is optional in the usual setup, and all of it outlives the campaign.
Here the same transaction produces a Monero subaddress and a hash. That is the whole record.
Step by step
- You fill in the form. Nothing is stored yet. The link preview is fetched
by this server, not your browser, so typing a domain into the box is not a visit to it.
- An invoice is created. It gets a subaddress used by that invoice alone.
There is no name attached because there is no field for one.
- You pay. The watcher sees the amount arrive and waits for confirmations.
- It settles. The listing appears, a claim token is minted and shown once,
and only its SHA-256 hash is kept.
What was never created
No account. No email address. No card. No billing name. No row anywhere that joins a payment to a person, because the payment carries no person to join it to.
That has a cost, and it is worth stating: a lost claim token cannot be reset, because there is nothing to check a reset request against. The listing keeps the rank it paid for and stops being editable. We would rather that than hold a recovery channel that could be talked into handing a listing over.
And a receipt anyway
The awkward part of taking private money is that nobody can check your books. So every payment carries a Monero InProof: a signature showing a real transaction paid a real amount to this board, verifiable against the chain by anybody, revealing nothing about who sent it.
Private for the payer, checkable by everybody. Those two are usually sold as opposites.