PDD is where your own digital record belongs to you. Creating an account creates an identity you hold, anchored to a key on your own device, not a profile a company keeps about you. What you can do with that identity grows over time. Today there are three: you can sell your data, contribute it to academic research, or give it to a nonprofit or public-interest cause. Each is separate, each is something you choose, and none of them happens until you act.

PDD has a marketplace for your own data. With your explicit permission, Envoy can collect your browsing data, the pages you visit, your browsing history, and your most-visited sites, and it's stored on PDD's servers. It records where you go, not what you write: no typed text, no search contents, no form entries. Nothing is sold or shared until you approve a specific contract. When you approve one, the data it covers is sold to that organisation for the stated price, and you receive your share. You are the seller. PDD is the infrastructure that carries the transaction and enforces it.

You also decide what leaves. Blocking a site withholds it: those events stay in your own record, where you can see them, and are never delivered to anyone. A block holds across everything PDD carries, sale and research alike, unless you make an exception yourself. Blocking is private, and no organisation is told what you blocked or that you blocked anything. Stopping collection itself is a separate control: you can pause Envoy or switch it off at any time.

PDD also carries academic research. A research team recruits you with a study code. Before you join you see who runs the study, the institution behind it, which sites it covers, and what kinds of activity it collects. If you join, your browser sends that study its data on the schedule the study sets, de-identified, with page addresses and titles stripped out; PDD records that a delivery happened, not what was in it. Research is unpaid, and it is not a sale. Nothing on this page enrols you in a study. Joining is a separate decision you make at the time, and you can withdraw whenever you like, which stops all future delivery.

You receive 60% of the cleared price of every contract you complete, and that 60% is gross: payment processing and third-party costs come out of PDD's 40%, never out of your share. Your data is priced per browsing event, with reference rates by category shown per thousand impressions (CPM):

Reference rates observed May 2026, not guaranteed earnings. High-intent audience data trades for roughly $4–$10 CPM by category.

You keep every right the CCPA gives you — and here they're built into the system rather than something you have to request:

Know what data PDD holds: all of it is visible to you at your Home, anytime. Delete your account and data whenever you choose. Opt out of sale: the default is silence; nothing sells without your explicit action. Non-discrimination: saying no costs you nothing. You can also stop collection at any time — pause it in Envoy, or disable the extension.

Before you deliver data, only a provisional contract exists. You can cancel at the preview stage and nothing moves — no data is sent, no obligation attaches. Once you deliver under a contract, it is binding — like any contract — and cannot be revoked. You can leave the marketplace going forward at any time, but contracts you've already completed stand.

One identity per person. Creating multiple identities to claim duplicate compensation or evade obligations violates these terms and may disqualify all associated accounts.

Your keys are yours. Your account is anchored to a cryptographic key in your browser and protected by your password. If you lose access to all your devices and forget your password, your account may become permanently unreachable — PDD cannot recover it for you.

Early operation. PDD is new and provided as-is. Settlement is live, but we make no warranties about uptime or persistence while the system matures.

Electronic agreement. By checking the boxes below, you agree to enter into this and future contracts electronically, with the same effect as a written signature.