Privacy

The payment processor knows who you are

An anonymous account becomes a named one at checkout, and the linkage lives with the processor and in the service's records.

4 min readPrivacy

Every earlier layer of anonymity ends at the payment form. An IP address is a household, a fingerprint is a browser configuration, but a card number or a wallet address resolves to a name, because that is the entire point of a payment system. The moment money changes hands, whatever was uploaded before checkout can be tied to a person after it.

What actually gets linked

A payment does not just authorise a charge. It creates a record, held by the processor, that connects a transaction ID, an amount, a timestamp and a billing identity to whatever the site sent along with the charge request - typically an order or account reference. If that reference maps to an upload or a result in the site's own database, the two records can be joined by anyone with access to both: the site operator, and separately, the processor.

This is true regardless of how anonymous the upload itself was. IP logging and device fingerprinting narrow a person down probabilistically, from signals that can be spoofed or that expire. A payment does it directly, with a legal name attached, because processors are required to know their customers for fraud and compliance reasons that have nothing to do with the site built on top of them.

Where the record actually lives

The linkage is not one record in one place. The site typically stores enough to reconcile a payment against an account - at minimum a transaction ID and a status. The processor stores the full billing detail: name, card metadata, sometimes a billing address, retained on its own schedule under its own policies, which are usually longer and less visible than the site's. A bank or card issuer holds a third copy, on a third retention schedule, for a different set of reasons entirely.

None of these three parties needs to be malicious for the linkage to matter. A breach at any one of them, a subpoena served on any one of them, or simple internal access by staff at any one of them reconnects a name to an upload that the person may have believed was anonymous because they never typed their name into the site itself.

Subscriptions extend the window

A one-off payment links a single transaction to a single upload session, and the linkage, while real, is a snapshot. A subscription is different: it keeps the billing relationship active for as long as the subscription runs, which means every result produced during that window sits under the same identified account rather than a series of separate anonymous visits. Cancelling stops future charges but does not retroactively unlink the results already produced while it was active, since the join between account and upload happened at the time each result was created, not at the time the subscription ends.

Chargebacks and refund requests widen the record further, almost as a side effect of the dispute process itself. A disputed charge typically requires the merchant to produce evidence of what was purchased in order to contest it, which can mean the specific service or result in question is described in a support ticket or a dispute file that would not otherwise have existed, held by the processor as part of the case record for as long as dispute records are kept.

What reduces this, and what does not

Using a privacy-preserving payment method - a prepaid card bought with cash, a payment method not tied to your legal identity - genuinely breaks the chain at the processor, which is the strongest single step available, since it is the layer that otherwise resolves everything else to a name. It does nothing for the site's own logs, which is where the account email usually does the same linking job even without a card in the picture. Paying and never creating an account narrows the linkage to whatever the checkout flow itself required, which is worth checking rather than assuming, since some tools ask for an email at checkout regardless of whether one was needed to use the free tier.

Rate Cock processes payment through a standard third-party processor, the same arrangement most sites of this kind use, and its policy is the place to read what gets retained on the site's side of that boundary rather than the processor's. A commissioned human review runs through a comparable checkout step; Rate Penis's coverage of how that arrangement works addresses the identity question from the reviewed side rather than the scored side. Method-based measurement tools face the same linkage the instant a subscription or a one-off report is paid for; Measure My Cock's data page covers what that site keeps once payment has occurred. Weighing this against everything else worth checking before trusting a tool is Penis Rater's broader subject, and the payment step is one line in that longer list rather than the whole of it.

Read next

Full archive