Privacy notice

01

Controller and contact

Privacy questions and requests may be sent to support@milliondollarwebsite.net.

02

Data we process

Supabase Auth processes your name, email, password authentication and session. Passwords are handled and hashed by Supabase and are never stored in readable form by this application. The profile records the accepted Terms version and timestamp. Purchases store account identifiers, order state, coordinates, project details, creative paths, and Stripe references. Stripe processes payment details; the application does not store card numbers.

03

Public information

For live regions, the public site exposes the title, description, owner number, coordinates, dimensions and sanitized artwork. Approved creator profiles may additionally expose the creator name, bio, selected social links, referral slug and creator artwork. Emails, commission balances, payout records, application notes and admin notes are never public. If an owner supplies an external destination, visitors reach it only through the block’s information page and a tracked redirect. Drafts, requested-change artwork, owner action notes, and disabled or cancelling records remain private.

04

Creator referral attribution

When you follow an approved creator link, the service stores a random HTTP-only visitor identifier and a one-way server hash for up to 30 days. The latest valid creator referral replaces an earlier one. Referral events may include the landing time, referring page and supplied UTM campaign fields. If you register or sign in, the active attribution may be associated with your account so eligible purchases can be credited without exposing your identity to the creator.

Creators see aggregated clicks, unique visitors, registrations, purchases, revenue and commission totals. They do not receive referred customer names or email addresses. The service does not use a shared IP address by itself to block or identify a referral.

05

Analytics and security

Funnel and click events use minimal metadata. Short-lived hashed network identifiers support database-backed rate limits and abuse prevention. Administrative changes are recorded in an audit log.

06

Retention and requests

Records are retained as needed to operate the owner record, handle payments, prevent fraud, and meet legal obligations. Contact support@milliondollarwebsite.net to request access or correction.