Privacy Policy

This Privacy Policy describes how ONEMILLIONNOTES™ (https://onemillionnotes.com) collects, uses, stores, and shares information when you visit the website or submit a note.

Depending on how you use the site, we may collect:

• display name, if you choose to provide one
• email address collected at Stripe checkout, which we link privately to your submission and payment
• note content you submit, the terms version accepted with a new checkout, and when that acceptance was recorded
• city, country, region, or coordinate fields you submit
• checkout and payment references, amount, currency, payment and refund status, and the linked note reference (we do not store full card details)
• technical data such as IP address, browser and device information, and server logs
• cookies and similar technologies needed to operate the site (for example authentication and session cookies)

We use information to:

• receive and review note submissions
• publish approved notes in the public archive
• moderate unsafe, abusive, or spam content
• operate, maintain, and improve the website
• process payments and optional creator support
• send submission, payment, approval and applicable refund confirmations to your checkout email
• link your checkout email privately to your note for support and ownership queries
• reuse eligible approved note text and its public number on social media and merchandise under the permission in our Terms of Use
• maintain security and prevent abuse
• calculate project counters and stated impact totals

Approved notes and the public fields you choose to submit (such as display name and location) may appear publicly on ONEMILLIONNOTES™, including in Latest entries, the archive, the globe, and public note pages.

Your checkout email and payment references are not published in the archive. Choosing an anonymous display name hides that name from public view; it does not make the payment or your note text anonymous to us. Exact coordinates can be public when you choose a precise location. Do not use your home address or other private information if you do not want it shown.

Under the permission in our Terms of Use, eligible approved note text and its public number may also appear on our social media accounts, promotional materials and merchandise offered for sale. These audiences extend beyond the website. We seek separate permission to include your display name or submitted location in those uses. Do not put personal information into the note text that you do not want reproduced. Other people may copy or share public content.

Payments are processed by Stripe. ONEMILLIONNOTES™ does not store full payment card details on its own servers.

Stripe supplies the checkout email, payment references and payment status so we can fulfil the submission, send confirmations and handle refunds. The checkout email is required for this flow. See Stripe's Privacy Policy for how Stripe handles the information you give it. Giving a checkout email does not subscribe you to marketing emails.

Where UK data protection law applies, we rely on one or more of the following bases:

• Consent — where we specifically ask for an optional use of personal information. You may withdraw that consent by contacting us without affecting earlier lawful use
• Contract — to receive and review your note, process the requested payment and provide submission, publication and transactional email services
• Legitimate interests — for moderation, safety, security, abuse prevention, support and keeping evidence of accepted terms. Any promotional reuse of personal information requires its own applicable basis; the copyright licence alone does not remove data protection requirements
• Legal obligation — where we must retain or disclose information to comply with law

We may share information with service providers that help us runONEMILLIONNOTES™, including:

• Supabase (database and authentication infrastructure)
• Vercel (website hosting)
• Resend (transactional email delivery)
• Stripe (checkout, payments and refunds)
• Mapbox (maps), and Geoapify and OpenStreetMap-based services such as Photon and Nominatim (location search and place lookup)
• social media platforms and printing or fulfilment partners when we publish or produce eligible notes under the agreed licence

Map and location services may receive your search text or the coordinates you select; browser-loaded services also receive connection information such as your IP address. We do not send checkout emails or payment records to printers for note artwork.

We may also disclose information if required by law, regulation, court order, or to protect the rights, safety, and security of the project and its users.

Approved notes may remain in the public archive unless removed for moderation, legal, or operational reasons.

Rejected, pending, and administrative records may be kept for moderation, audit, refund handling, abuse prevention, or legal purposes.

Payment and accounting records may be kept for as long as required for tax, accounting, and legal compliance.

If you are in the UK, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability where applicable.

You have the right to object to processing based on legitimate interests. Where we rely on consent, you can withdraw it by contacting us. We assess removal and erasure requests under the applicable law; a copyright licence does not override these rights.

You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. Some payment, dispute or legal records may need to be retained even when public content is removed. Copies shared by others or merchandise already distributed may not be recoverable.

To exercise your rights, contact us at support@onemillionnotes.com.

ONEMILLIONNOTES™ uses cookies and similar technologies that are necessary to operate the site, such as authentication and session cookies. A checkout cookie links your browser to its private payment confirmation for up to 30 days. Drafts and checkout retry information are saved in browser session storage so you can resume writing or return from checkout.

We use a lightweight first-party session signal so operators can see aggregate site traffic on the admin page (active visitors and visit counts, daily trends, approximate countries/cities, referral sources and entry pages). This uses a random browser identifier stored in local browser storage, timestamps, a broad device category and referral hostnames. We also use coarse network location supplied by our hosting provider, with rounded coordinates; it can be inaccurate, particularly with VPNs and mobile networks. We do not request your device’s GPS location for traffic reports. This identifier is pseudonymous rather than a guarantee of complete anonymity. It does not store raw IP addresses for these statistics, and detailed traffic data is not shown publicly.

We do not intentionally use third-party analytics cookies unless this changes. If additional analytics are added later, this policy will be updated.

ONEMILLIONNOTES™ is not directed at children. We do not knowingly collect personal information from children below the applicable age without appropriate permission. If you believe a child has submitted information without consent, contact us at support@onemillionnotes.com.

For privacy questions, contact us at support@onemillionnotes.com.