▶ Privacy Policy

buymillionpixels.com ("we", "us", "our") operates a digital art canvas where users buy and colour pixels. We act as the data fiduciary (under India's Digital Personal Data Protection Act, 2023 / DPDP) and the data controller (under the EU/UK GDPR) for the personal data described here.

For any privacy request or grievance, contact us at buymillionpixels@gmail.com. This is also our Grievance Officer contact for DPDP purposes.

Account data: when you sign in with Google we receive your name, email address, and profile photo. If you register with email and password, we store your email address (passwords are stored, salted and hashed, by our auth provider — we never see them).

Activity data: the pixels you place (coordinates, colour, pixel type), any hover message and link you choose to add, and your purchase/order history.

Technical data: your approximate country (derived from your IP at request time) solely to show the correct regional price — we do not store it; and essential cookies needed to keep you signed in.

We do not collect sensitive personal data, and we do not knowingly collect data from children (see Section 9).

To provide the service — authenticate you, save and display your pixels, process your orders. (Legal basis: performance of a contract / necessary for the service you request.)

To show the correct regional price and prevent fraud and abuse. (Legal basis: our legitimate interests.)

To keep you signed in. (Legal basis: your consent / strictly necessary cookies.)

We never sell, rent, or trade your personal data to anyone, for any purpose.

We do not send promotional or marketing emails. The only emails you may receive are essential, transactional ones (for example, replying to a support request you send us). You will not be added to any mailing list.

Payments are processed by Razorpay. Your card, UPI, bank, or wallet details are entered directly with the payment provider — we never see or store full payment credentials. We only receive a payment confirmation and the identifiers needed to reconcile your order.

We share data only with the service providers that run the platform: Supabase (database & authentication), Vercel (hosting), Razorpay (payments), and Google (sign-in). Each processes data only to provide its part of the service, under its own security and privacy commitments.

Some of these providers may process data outside your country. Where that happens, it is done under appropriate safeguards and only as necessary to deliver the service.

We keep your account and order records while your account exists and for as long as required for legal, tax, and accounting purposes. When you delete your account (Section 8) we remove your personal data and your placed pixels, except records we are legally required to retain.

You have the right to access the personal data we hold about you, to correct it, and to erase it. Under GDPR you also have the rights to restriction, data portability, and to object to certain processing; and you may withdraw consent at any time. Under DPDP you have the right of access, correction, erasure, grievance redressal, and to nominate another person to exercise your rights.

Self-service deletion: sign in and go to "My Pixels" → "Danger zone" → "Delete my account & data". This permanently deletes your account, profile, order history, and placed pixels.

Or email buymillionpixels@gmail.com and we will action your request. If you are unhappy with how we handle a request, you may lodge a complaint with the Data Protection Board of India (DPDP) or, in the EU/UK, your local supervisory authority.

The service is not directed to children under 13, and you must be 18 (or the age of majority where you live) to make a purchase. We do not knowingly process children's data; contact us if you believe a child has provided us data and we will delete it.

We protect your data with encryption in transit, row-level database security, scoped server-side access to sensitive operations, and signed/verified payment webhooks. No system is perfectly secure, but we work to keep your data safe and to fix issues promptly.

We may update this policy; material changes are reflected by the "Last updated" date below. For any question, request, or grievance: buymillionpixels@gmail.com.