Privacy Policy

Data controller

The operator's mandatory identifying and contact details are pending completion. THE MILLION must not activate commercial sales until this section is complete.

Data processed

During checkout THE MILLION processes the buyer's name, email address and telephone number; technical anti-abuse data represented through protected hashes; and payment, session and transaction identifiers supplied by Stripe. Card or bank-account credentials are entered in Stripe and are not stored by THE MILLION.

Purposes and legal bases

• Managing the order, payment, ownership ledger and certificate: performance of the purchase contract.
• Fraud prevention, rate limiting, security and defence of legal claims: legitimate interests and compliance with legal duties, as applicable.
• Accounting, tax and transaction records: compliance with legal obligations.

No marketing email or profiling is currently performed.

Recipients and processors

Data may be processed by Stripe for payments, Supabase for database infrastructure and Vercel for application hosting, subject to their contractual terms and applicable safeguards. Public certificate claims contain no buyer name, email, telephone number or Stripe identifier.

Retention

Transaction and ownership records are retained for the duration necessary to provide and prove the purchased service and to meet accounting, tax, fraud-prevention and legal-claims obligations. Exact operational retention periods must be approved before launch for each data category.

Rights

Depending on applicable law, data subjects may request access, rectification, erasure, restriction, portability or objection, and may complain to the competent supervisory authority. The operational privacy contact must be published before sales are activated.

International processing

Infrastructure providers may process data outside the customer's country. Before launch, the operator must document processor locations, data-processing agreements and the transfer safeguards actually used.