Privacy Policy
This policy explains what personal data Million $ Reel ("the Service", "we", "us") collects, why, and what rights you have over it. It applies to everyone who uses milliondollarreel.com. By using the Service you agree to this policy alongside our Terms of Service.
1. Who we are
Million $ Reel operates this collaborative pixel canvas and is the data controller for the personal data described here. For any privacy question or request, contact us at info@milliondollarreel.com.
2. What we collect
- Account details:the username you choose and the email address you provide at sign-up. Your password is never stored in readable form; we keep only a salted cryptographic hash of it.
- Canvas activity:the pixels you place (their position, colour, and time), linked to your account. Placed pixels are shown publicly on the canvas, and hovering a pixel reveals the username of who placed it.
- Payment records:when you buy credits, your card details are handled entirely by Stripe and are never seen or stored by us. We keep a record of your credit balance and the reference for each completed purchase.
- Technical data:your IP address is processed temporarily to apply rate limits and protect against abuse and brute-force attempts. A login token is stored in your browser to keep you signed in.
We do not run third-party advertising or behavioural tracking, and we do not sell your data.
3. Why we use it, and our legal basis
- To provide the Service (run your account, display the canvas, process credits). Basis: performance of our contract with you.
- To keep the Service secure (rate limiting, abuse detection, fraud prevention). Basis: our legitimate interests.
- To send account email such as password resets. Basis: performance of our contract with you.
- To meet legal and accounting obligations for payments. Basis: legal obligation.
4. Who we share it with
We use a small number of trusted providers ("processors") to run the Service. They only handle your data to provide their service to us:
- Stripe:payment processing.
- Resend:sending account emails.
- Hetzner:server hosting (data stored in the EU).
- Porkbun:domain and email forwarding.
We may also disclose data where required by law. We do not otherwise share your personal data with third parties.
5. How long we keep it
We keep your account data for as long as your account exists. Pixels you have placed form part of the public canvas and may remain visible even after your account is closed. Operational backups are retained for up to 14 days. Payment records are kept as long as required for legal and accounting purposes.
6. Your rights
If you are in the UK or EU, you have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing relies on it. To exercise any of these, email info@milliondollarreel.com and we'll respond within the time the law allows. You also have the right to complain to your local data protection authority. In the UK, the Information Commissioner's Office (ICO) at ico.org.uk.
7. Security
We protect your data with measures including hashed passwords, encrypted (HTTPS) connections, server-side access controls, rate limiting, and regular backups. No system is perfectly secure, but we work to keep your data safe and will notify you and the relevant authority of a breach where required.
8. Children
The Service is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will remove it.
9. Changes
We may update this policy from time to time. The "last updated" date above reflects the latest version, and significant changes will be noted on this page.
10. Contact
For any privacy question or request, email info@milliondollarreel.com.
This policy is provided for transparency and is not legal advice. Before scaling up, consider having it reviewed by a qualified data-protection professional.