Privacy Policy

01 Scope and who is responsible

This Privacy Policy applies when you visit or use Millions Gallery, create an account, design or purchase pixels, edit a creator profile, submit a message or report, follow a creator link, or communicate with us (the "Service"). Millions Gallery is responsible for personal information processed through the Service.

This policy works together with our Terms of Service and Community Rules. Stripe and linked third-party sites process information under their own privacy policies.

02 Information we collect

Account information

We collect your email address, username, authentication records, account identifier, member number, and account creation or update timestamps. Our authentication provider handles passwords; Millions does not store a readable copy of your password.

Profile and public content

We collect the name, username, profile photo, website and social usernames or links, purchase messages, pixel artwork, pixel coordinates, colors, purchase sizes, and other profile information you submit. We also calculate information such as pixels owned and leaderboard rank.

Image uploads and canvas drafts

When you choose an image for pixel conversion, the browser processes it into colors used for your selected area. The source image and editor state may be kept locally in your browser so a canceled or interrupted checkout can be restored. Purchased pixel colors and coordinates are sent to our servers. A profile photo you choose is uploaded and stored so it can be shown publicly.

Checkout and transaction information

Stripe collects payment-card details, billing information, and checkout information. Millions receives information needed to fulfill and support the purchase, such as your checkout email, payment status, amount, currency, Stripe customer or session identifiers, selected pixels, reservation status, and timestamps. We do not receive or store your complete card number.

Reports and communications

If you submit a report or contact us, we collect the reason, message, reported creator or content, related coordinates, account information, and correspondence needed to review and respond.

Technical and usage information

We and our infrastructure providers may process IP address, browser and device information, user agent, referrer, request time, error records, authentication cookies, and activity needed to operate, secure, troubleshoot, and rate-limit the Service. We may transform identifiers, such as hashing an IP address, when a less directly identifying value is sufficient.

03 How we use information

• Provide the canvas, accounts, creator profiles, messages, gallery, rankings, and other Service features.
• Reserve pixels, process and fulfill purchases, prevent overlapping claims, send receipts and account invitations, and maintain ownership records.
• Store and publicly display the artwork, creator information, links, and purchase messages you choose to publish.
• Authenticate users, recover accounts, respond to requests, and provide customer support.
• Review reports, enforce our Terms and Community Rules, prevent fraud and abuse, apply rate limits, and protect the Service and its users.
• Diagnose errors, maintain performance, understand aggregate use, improve features, and comply with legal, tax, accounting, and dispute obligations.

04 What is public

Millions is a public artwork and community directory. Your purchased pixel artwork, colors, coordinates, name, username, profile photo, purchase messages, social or website links, member number, pixels owned, rank, purchase sizes, and purchase dates may be visible to anyone. Visitors can open a creator profile from a claimed pixel, the Members view, or the leaderboard.

Public information may be indexed by search engines, copied or shared by visitors, or preserved outside our control. Do not submit public content you want to keep private. Your email address, password, payment-card details, private reports, and account-security records are not intended to be public.

05 Legal bases where applicable

• Contract: to create an account, process and fulfill a pixel purchase, maintain ownership, and provide requested features.
• Legitimate interests: to operate and improve the Service, keep the live canvas fair, prevent fraud and abuse, secure accounts, moderate public content, and defend legal claims.
• Consent: where we ask for consent for a particular optional use or communication. You may withdraw consent for future processing.
• Legal obligation: to keep required payment, tax, accounting, complaint, and compliance records and respond to lawful requests.

06 When we share information

We share information only as needed to operate the Service, complete transactions, protect users, or comply with law. Recipients may include:

• Stripe, which provides checkout, payment processing, receipts, fraud prevention, and payment confirmation.
• Supabase, which provides authentication, database, storage, and related infrastructure.
• Resend, which delivers transactional and account emails.
• Hosting, security, monitoring, and technical providers that process data for us under appropriate obligations.
• Professional advisers, payment partners, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, enforce agreements, resolve disputes, or complete a sale or transfer of the Service.

We do not sell personal information or share it for cross-context behavioral advertising. If that practice changes, we will update this policy and provide any legally required choices before applying the change.

07 Cookies and browser storage

Millions uses cookies and similar browser storage that are necessary to operate the Service. These may keep you signed in, protect a pending checkout, restore a canvas selection or uploaded-image draft, remember interface preferences, prevent duplicate fulfillment, and secure or rate-limit requests.

Local storage and IndexedDB remain on your device until the Service removes the entry, the entry expires, or you clear browser data. Blocking necessary cookies or storage may prevent accounts, checkout recovery, and other features from working correctly.

08 Retention

• Public pixel ownership, artwork, and purchase records may remain for the life of the collaborative painting and in reasonable archives or backups.
• Account and profile data are kept while your account is active and as needed to preserve public artwork, ownership history, moderation decisions, and legal records.
• Payment and transaction identifiers are kept as needed for fulfillment, accounting, tax, fraud prevention, chargebacks, and disputes.
• Pixel reservations and checkout-recovery data expire or are removed when no longer needed for checkout and fulfillment.
• Reports, security events, IP-derived rate-limit records, and correspondence are kept only as long as reasonably needed for safety, enforcement, support, and legal obligations.
• Backups may retain deleted information for a limited period before normal rotation removes it.

09 Your privacy choices and rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to appeal a denied request or complain to a privacy regulator. You may also have a right not to receive discriminatory treatment for exercising a privacy right.

Some information cannot be deleted immediately or completely when it must be retained for a completed transaction, fraud prevention, legal compliance, dispute resolution, or the integrity and attribution of the public collaborative artwork. We will explain any applicable limitation when responding.

To make a request, email support@millionsgallery.com. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where local law permits.

10 Security

We use administrative, technical, and organizational safeguards intended to protect information, including access controls, server-only credentials, row-level database controls, rate limiting, and third-party payment processing. No online service can guarantee absolute security. Use a unique password and contact us if you suspect unauthorized access.

11 International processing

Millions and its providers may process information in countries other than where you live. Where required, we rely on recognized transfer mechanisms or other appropriate safeguards. Provider locations and safeguards can change as their infrastructure evolves.

12 Children

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

13 Changes and contact

We may update this Privacy Policy when the Service, our providers, or legal requirements change. The date at the top identifies the current version. We will provide additional notice of material changes where required.

For privacy questions, requests, or other legal notices, email support@millionsgallery.com.