Privacy Policy

1. Information We Collect

1.1 Personal Information

When you use our service, we may collect the following personal information:

• Account Information: Name and email address when you create an account
• Payment Information: Billing details processed securely through Stripe (we do not store payment card details)
• Purchase History: Records of squares purchased and transaction details
• Content: Images and content you upload to your purchased squares

1.2 Automatically Collected Information

• Usage Data: How you interact with our website and services
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, access times, and pages visited
• Cookies: Session cookies for authentication and site functionality

2. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our service
• Processing payments and managing your account
• Displaying your content on purchased squares
• Sending login links and important service notifications
• Improving our website and user experience
• Preventing fraud and ensuring security
• Complying with legal obligations

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

3.2 Limited Sharing

We may share your information in the following limited circumstances:

• Service Providers: With trusted third parties (like Stripe for payments) who help us operate our service
• Legal Requirements: When required by law, court order, or to protect our rights
• Safety: To prevent fraud, abuse, or protect the safety of users
• Business Transfer: In the event of a merger, acquisition, or sale of assets

3.3 Public Content

Content you upload to your squares becomes publicly visible on the Million Grid Club website. Do not upload content you wish to keep private.

4. Data Security

We implement appropriate security measures to protect your personal information:

• Secure HTTPS encryption for all data transmission
• Secure session management and CSRF protection
• Regular security monitoring and updates
• Limited access to personal data on a need-to-know basis
• Secure password hashing and authentication

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active
• Purchase Records: Retained for accounting and legal compliance (typically 7 years)
• Content: Retained for the lifetime of the Million Grid Club project
• Log Data: Typically retained for 12 months for security and analytics

6. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for login, security, and basic site functionality
• Session Cookies: To maintain your login state
• Security Cookies: To prevent CSRF attacks and ensure secure transactions

You can control cookie settings through your browser, but disabling essential cookies may affect site functionality.

7. Third-Party Services

7.1 Payment Processing

We use Stripe for secure payment processing. Stripe's privacy policy governs how they handle your payment information. We do not store credit card details on our servers.

7.2 Email Services

We use email services to send login links and notifications. These services are configured to protect your privacy and data.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain uses of your information

To exercise these rights, please contact us through our contact form.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

10. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during international transfers.

11. Future Marketplace

When the resale marketplace launches (at 90% grid capacity), additional privacy considerations will apply:

• Square ownership records will be necessary for marketplace functionality
• Transaction history for resales will be maintained
• Updated privacy terms will be provided before marketplace launch

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our contact form on the website.

14. Legal Basis for Processing (GDPR)

For users in the European Union, our legal basis for processing your personal information includes:

• Contract: Processing necessary to provide our services
• Legitimate Interest: For security, fraud prevention, and service improvement
• Consent: Where you have provided explicit consent
• Legal Obligation: To comply with applicable laws