Privacy Policy

the operator of My Million Mark — an individual owner, not a company — operates My Million Mark and decides how the data described here is used. Data requests go to support@mymillionmark.com.

Public pages, Share Cards, metadata and structured data contain only the Mark number, the sentence, and the name or nickname and country the participant chose to publish. They never contain email addresses, payment details, Stripe identifiers, IP or device identifiers, or the owner’s private legal, banking, tax or identity information.

Your sentence, your name or nickname, your country, and your Mark number are public by design. They appear in the archive, on your Mark page, and in Share Cards. Only submit a name you are comfortable showing the world.

Payments are processed by Stripe. My Million Mark never receives or stores full card numbers or security codes. We store the payment identifiers Stripe returns so that a purchase can be matched to a Mark and supported or refunded — these identifiers are private and are never shown publicly.

If you provide an email at checkout, Stripe uses it to send your receipt and for payment support. It is not used for marketing, and you are never added to a mailing list.

When someone reports a Mark, we store the reason, any details written, and a one-way hash used only to limit abuse of the report form. Reports are private and visible only to moderation.

Analytics is first-party and cookie-free. We record only an event name (for example “mark page viewed”), the page path, the Mark number involved, and — when you arrived from someone else’s Mark — that Mark’s number, so we can understand how the archive grows. No IP addresses, no device fingerprints, no advertising identifiers, no cross-site tracking, and no third-party analytics platform.

Because no tracking cookies are used, no cookie consent banner is required for analytics. Stripe may set cookies strictly necessary for processing your payment and preventing fraud.

Published Marks are intended to remain in the archive long-term. Payment records are kept as long as required for accounting and dispute handling. Report and analytics records are kept only as long as they are useful for moderation and product decisions.

Data is stored on managed infrastructure with access rules that keep private fields — such as payment identifiers and reports — unreachable from the public site. Administrative functions require an authenticated account with an explicit administrator role.

The archive is global, and data may be processed in countries other than yours, including by Stripe as our payment processor.

Depending on where you live, you may have rights to access, correct, or delete personal data, or to object to certain processing. Contact us through the contact page. Note that removing a published sentence from public display does not release the number — numbers are never recycled.