Data protection
Privacy Policy
What Million Profile collects, why we collect it, and the rights you have over your profile data.
Last updated June 24, 2026
Private
Public
Profile
Reviewed
Abuse

Public profile details stay separate from private checkout and support data.
Private
Public
Profile
Reviewed
Abuse
This policy explains what Million Profile("we", "us") collects, why, who we share it with, how long we keep it, and the rights you have. We collect only what we need to run the grid. We are the controller of the personal data described here.
1. Data we collect
- Profile details you submit: display name, handle, bio, category, country, city, profile and website links, and an image or logo. This is intended to be public once approved.
- Contact email: used for your receipt, review updates and support. Not shown publicly.
- Payment data: processed by Stripe. We receive a payment confirmation and limited metadata (such as amount and status). We never see or store your full card number.
- Click analytics: when a profile is clicked we record the event using a hashed, non-identifying visitor signature derived from IP and user agent. We do not store raw IP addresses.
- Cookies and local storage: small items used for essential functions, your preferences and optional analytics. See our Cookie Policy.
- Server and security logs: standard technical logs kept briefly to operate and protect the Service.
2. How we use your data
- To display your spot and link on the grid
- To process your payment and send your receipt
- To review profiles, enforce our rules and prevent abuse
- To contact you about your spot or a report
- To measure traffic in aggregate and improve the product
- To meet legal, accounting and security obligations
3. Legal bases
Where the GDPR or similar laws apply, we rely on: performance of a contract (providing the spot you bought); our legitimate interests (running, securing and improving the grid, and preventing abuse); consent (optional analytics cookies, which you can withdraw); and legal obligation (tax and record-keeping).
4. Who we share data with
We use a small set of trusted processors and do not sell your personal data:
- Stripe for payment processing.
- Google Firebase for the database, image storage and admin authentication.
- Resend for transactional email (receipts and review updates), when enabled.
- Our hosting and analytics providers for serving the site and aggregate measurement.
We may also disclose data if required by law or to protect the Service and its users.
5. International transfers
Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
6. How long we keep it
We keep profile and payment records for as long as your spot is live and as needed for accounting, legal and anti-abuse purposes. If your spot is removed we delete or anonymise associated personal data within a reasonable period, except for records we must retain (such as payment receipts) or backups that expire on a rolling basis.
7. Public information
The profile details and image you submit are designed to be public on the grid and in share cards once approved. Please do not include anything you are not comfortable making public. Your email is never shown publicly.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict your personal data, to object to certain processing, and to withdraw consent. You can also ask us to edit or remove your spot at any time. To exercise any of these, email support@millionprofile.comwith the subject "Privacy request". We respond within a reasonable time and may need to verify your identity. You may also complain to your local data protection authority.
9. Adding someone else's profile
You must only submit a profile you own or are authorised to represent. If you believe a profile of yours was added without permission, contact us or use the report form and we will review and remove it where appropriate.
10. Children
The Service is not directed at children. You must be at least 18, or the age of majority where you live, to purchase. We do not knowingly collect data from children.
11. Security
All data access runs server-side through secured credentials; the database denies direct public access. No system is perfectly secure, but we take reasonable measures to protect your data.
12. Changes
We may update this policy. Material changes are reflected by the date at the top of this page.
13. Contact
Privacy questions or requests? Email support@millionprofile.com.