Privacy Policy

Last updated: [EFFECTIVE_DATE]

Not ready for launch. This document still contains bracketed placeholders such as [LEGAL_ENTITY_NAME]. Fill them in via the LEGAL_* environment variables (see src/lib/legal.ts) before taking real payments. This notice disappears once they are all set.

The Million Squares is run by [LEGAL_ENTITY_NAME]. This policy explains what we collect and what we do with it. The short version: we collect very little, because there are no accounts here, and we never sell any of it.

What we collect

• Your email address, captured at checkout. Used for your receipt, the link to your square, upload reminders, and — if you chose to leave one — your time-capsule note.
• The image you upload, plus any optional caption, category, and link. All of this is public by design and permanent.
• Your optional time-capsule note, stored until it has been sent back to you.
• Payment information is collected and processed by Stripe, not by us. We receive a confirmation, the amount, and a card fingerprint used solely to detect attempts to buy more than one square. We never see or store your card number.
• Abuse reports, including a one-way hash of the reporter's IP address. We store the hash, not the address itself, and use it only to detect repeated bogus reporting.

What we do not do

• We do not sell, rent, or trade your personal information. Ever.
• We do not create accounts, passwords, or profiles.
• We do not run advertising trackers or third-party analytics pixels on the Site.
• We do not email you marketing you did not ask for.

Who else sees it

Only the service providers needed to run the Site: our payment processor (Stripe), our email provider, our database host, and our image storage provider. Each receives only what it needs to do its job. We may also disclose information where legally required, or as required by 18 U.S.C. § 2258A in the case of child sexual abuse material.

How long we keep it

Your square, its image, and its claim date are kept indefinitely — that permanence is the product. Your email address is kept for as long as the square exists, because it is the only way to reach you about it. Time capsule notes are deleted after their final scheduled delivery.

Your choices

You may ask us to stop sending you email at any time. Note that we cannot delete or alter a square's public content once uploaded — that is a deliberate, disclosed feature of the product, agreed to at purchase, and it is technically the same operation as the edit capability that does not exist. You may ask us to remove your email address from our records once your upload window has closed; we will confirm what that means for reaching you afterwards.

Depending on where you live you may have additional rights over your personal data. Write to us and we will do our best to help.

Children

The Site is not intended for anyone under 18 and we do not knowingly collect information from children.

Contact

[CONTACT_EMAIL]
[LEGAL_ENTITY_NAME], [MAILING_ADDRESS]