Privacy
TOLL sets no cookies, runs no analytics, and stores nothing about a visit.
Reading the site
Pages are static and served from a cache. No script on the site reports anything about you; the one script that runs fills in today’s date in a citation and copies it to your clipboard when you ask. The host that serves the pages keeps the request logs any web host keeps for its own operation; TOLL does not read them into anything.
The report form
A report or reply stores what you typed, the page it concerns, and the time. It is published unedited with its outcome, so type nothing you would not publish. To cap submissions at 10 an hour per address and 60 an hour in all, the form stores a keyed hash of the submitting network address; the hash cannot be turned back into the address without the key, is never published, and is not used for anything else. A reply signed with a wallet key stores the signature for verification and does not publish it. Nothing else is collected. Withdrawing a report leaves it marked withdrawn rather than deleting it, because the record is append-only (how reports work).
Sellers and wallets
A payee wallet is a payment address as declared in a public registry. TOLL groups endpoints by it and never claims it identifies a person or a company (method). A seller named on a page can reply on it.