Million Profile

Data protection

Privacy Policy

What Million Profile collects, why we collect it, and the rights you have over your profile data.

Last updated June 24, 2026

Private

Email

Public

Profile

Reviewed

Abuse

Privacy controls

Public profile details stay separate from private checkout and support data.

Private

Email

Email: Private

Public

Profile

Profile: Public

Reviewed

Abuse

Abuse: Reviewed
ReviewReview stepPlacePlace stepShareShare step

This policy explains what Million Profile("we", "us") collects, why, who we share it with, how long we keep it, and the rights you have. We collect only what we need to run the grid. We are the controller of the personal data described here.

1. Data we collect

  • Profile details you submit: display name, handle, bio, category, country, city, profile and website links, and an image or logo. This is intended to be public once approved.
  • Contact email: used for your receipt, review updates and support. Not shown publicly.
  • Payment data: processed by Stripe. We receive a payment confirmation and limited metadata (such as amount and status). We never see or store your full card number.
  • Click analytics: when a profile is clicked we record the event using a hashed, non-identifying visitor signature derived from IP and user agent. We do not store raw IP addresses.
  • Cookies and local storage: small items used for essential functions, your preferences and optional analytics. See our Cookie Policy.
  • Server and security logs: standard technical logs kept briefly to operate and protect the Service.

2. How we use your data

  • To display your spot and link on the grid
  • To process your payment and send your receipt
  • To review profiles, enforce our rules and prevent abuse
  • To contact you about your spot or a report
  • To measure traffic in aggregate and improve the product
  • To meet legal, accounting and security obligations

3. Legal bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (providing the spot you bought); our legitimate interests (running, securing and improving the grid, and preventing abuse); consent (optional analytics cookies, which you can withdraw); and legal obligation (tax and record-keeping).

4. Who we share data with

We use a small set of trusted processors and do not sell your personal data:

  • Stripe for payment processing.
  • Google Firebase for the database, image storage and admin authentication.
  • Resend for transactional email (receipts and review updates), when enabled.
  • Our hosting and analytics providers for serving the site and aggregate measurement.

We may also disclose data if required by law or to protect the Service and its users.

5. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep it

We keep profile and payment records for as long as your spot is live and as needed for accounting, legal and anti-abuse purposes. If your spot is removed we delete or anonymise associated personal data within a reasonable period, except for records we must retain (such as payment receipts) or backups that expire on a rolling basis.

7. Public information

The profile details and image you submit are designed to be public on the grid and in share cards once approved. Please do not include anything you are not comfortable making public. Your email is never shown publicly.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict your personal data, to object to certain processing, and to withdraw consent. You can also ask us to edit or remove your spot at any time. To exercise any of these, email support@millionprofile.comwith the subject "Privacy request". We respond within a reasonable time and may need to verify your identity. You may also complain to your local data protection authority.

9. Adding someone else's profile

You must only submit a profile you own or are authorised to represent. If you believe a profile of yours was added without permission, contact us or use the report form and we will review and remove it where appropriate.

10. Children

The Service is not directed at children. You must be at least 18, or the age of majority where you live, to purchase. We do not knowingly collect data from children.

11. Security

All data access runs server-side through secured credentials; the database denies direct public access. No system is perfectly secure, but we take reasonable measures to protect your data.

12. Changes

We may update this policy. Material changes are reflected by the date at the top of this page.

13. Contact

Privacy questions or requests? Email support@millionprofile.com.