Pay online while sharing less about yourself

Every online purchase hands over more than money. It can reveal your real card number, your name, your address, your phone, your email, and a timestamped record that ties you to what you bought. You cannot make online shopping invisible, but you can share a good deal less. This guide covers concrete steps that work in the EU today.

The profile a merchant builds

When you buy online, the merchant and its payment processor typically record your card details, billing and delivery addresses, contact information, device, and the full history of what you have bought from them. If you log in or reuse the same email, those purchases link together over time into a single profile. That profile can be analysed for marketing, shared with partners, or exposed in a data breach.

Reducing this comes down to two habits: reveal fewer real payment details, and hand over less personal data at checkout.

Use virtual and disposable card numbers

A virtual card is a card number generated by your bank or a card app that spends from your real account without exposing your real card details to the merchant. A disposable (single-use) card goes further: its number changes after use, so a leaked number is worthless to anyone who steals it.

• Revolut offers free virtual cards on all plans, including a single-use disposable card. Because the number changes with each payment, disposable cards are meant for one-off online purchases, not contactless taps or recurring subscriptions. As of July 2026 the feature remains available across the regions Revolut serves.
• Many banks and neobanks now issue virtual cards from their app, sometimes letting you freeze, delete, or regenerate a number in seconds. Check your banking app before paying for a third-party service.
• Privacy.com offers merchant-locked virtual cards, but as of July 2026 it is available only to US residents with a US bank account, so it is not an option inside the EU.

Virtual cards do not hide your purchase from your own bank, and the merchant still needs a delivery address for physical goods. What they change is that the merchant no longer holds your primary card number.

Prepaid cards and gift cards

For situations where you want to avoid linking a purchase to your bank at all, a prepaid card or a retailer gift card bought with cash can help. You load a fixed amount, and the merchant sees only the prepaid instrument, not your account. Trade-offs to weigh: some prepaid cards require identity verification, fees can be high, and cards bought online are still tied to the purchase that created them. A gift card bought with cash in a shop is the least linkable version.

Share less at checkout

The payment method is only half the story. The form fields around it matter just as much.

• Use guest checkout when it is offered. Creating an account stores your details and stitches your orders together. A guest purchase leaves less behind.
• Decline loyalty linking unless you actively want the rewards. Loyalty programs exist partly to connect your purchases across visits and channels.
• Skip optional fields. Phone numbers and secondary emails are frequently optional even when the form nudges you to fill them. Under EU data-protection rules a merchant should collect only what it genuinely needs for the sale.
• Consider a dedicated email alias for shopping, so a breach or a marketing list does not spill into your main inbox and so purchases are harder to correlate with the rest of your life.
• Separate sensitive categories. Using a different card or account for purchases you would rather not have profiled limits how complete any single record of you becomes.

Where PayPal and one-tap wallets fit

Paying through PayPal or a mobile wallet can keep your real card number away from the merchant, which is a genuine privacy gain over typing your card into an unfamiliar site. The trade-off is that you concentrate a detailed view of your spending with that one intermediary, and “pay with one tap” flows can quietly connect your identity and purchases across many different sites. This is not a reason to avoid them, but it is a reason to be deliberate: a wallet reduces exposure to merchants while increasing what a single provider sees.

A note on cash and the bigger picture

Nothing online matches the privacy of paying with cash in person, which leaves no digital record at all. For the mechanics of what card and bank payments reveal, and how the proposed digital euro might change things, see How private are your payments?. For more on the broader direction of EU digital policy, see the money hub and our coverage of the Chat Control July 2026 vote.