Privacy Policy

What we collect

What you give us. Your email address. Your date of birth, which we ask for once to check you are 18 and then keep on file. The photo you upload, and a background image if you buy the upgrade that allows one. Whatever you choose to fill in on your page — a display name, a location, a one-line statement, a longer bio, and your usernames on the social platforms we support. The message you write if you buy somebody a number as a gift. The contents of a report or a bug you send us.

Payment.Payments are taken by Stripe. Your card number never reaches us and we could not store it if we wanted to. What we keep is the order: what was bought, how much, when, the email address it was bought with, and Stripe's references for it.

What we collect automatically.Your IP address and browser user-agent, used to rate-limit clicks and to tell manufactured traffic from people. When you arrive on somebody's shared link we store a one-way hash of your IP address and user-agent, so the same visitor cannot earn the same person a reward twice — it is a fingerprint we cannot turn back into an address. We also count clicks and visits, and record which platform a shared link was posted on.

Cookies. Three, and none of them for advertising. A sign-in cookie, which keeps you signed in for up to 60 days. 1in1m_theme, which remembers whether you chose light or dark. 1in1m_ref, which remembers for 30 days who sent you, so that the person who brought you gets the credit if you buy later. There are no third-party advertising or tracking cookies on 1in1m.

What we do with it

• Run your spot, your page and the wall.
• Sign you in, and keep you signed in.
• Take payment, send receipts, and handle refunds and disputes.
• Check that you are old enough.
• Email you about things you asked for, and optional things you have not turned off.
• Work out who earned a referral reward, and check that it was earned honestly.
• Keep the site up, spot abuse, and act on reports.
• Understand how the site is used, in aggregate.

We do not sell your personal information, and we do not share it with advertisers or data brokers. Advertising on 1in1m is sold by us and shown to everybody the same way. It is not targeted using anything we know about you.

What other people can see

1in1m is a public wall, so some of this is public by design. Your number and your photo always show — that is the product. Four things are yours to control, each on its own: your display name, your location, your one-line statement and your bio. Each can be set to public, friends only, or hidden, on your privacy page, and badges can be hidden too.

Two things are worth knowing before you choose. The wall's grid is cached and served identically to every visitor, so it cannot know who is looking — there, friends-only behaves as hidden. And a shared link produces a preview card that renders on somebody else's timeline, where neither you nor we can see it. Treat “public” as genuinely public.

Your email address is never shown to anybody, and neither is your date of birth, what you paid, or when you bought. Where the site shows how recently somebody arrived, it does so in broad buckets rather than timestamps.

Your photo is never analysed

This is the part most people want to know about, so here it is plainly.

• We do not run face detection or face recognition on your photo.
• We do not extract, derive or store facial geometry, measurements or a face template.
• We do not estimate your age or your identity from your photo.
• We do not sell or share your photo with advertisers or data brokers.

The one automated check an upload passes asks a single question — is this safe to show — and stores a single answer, safe or unsafe, with the date. Nothing about the face itself is derived or kept. That limit is deliberate, not an oversight. Questions about who is in a photo are handled by people, after a report. We collect no biometric identifiers as Illinois and comparable state laws define them.

The full detail, including exactly how long a photo lives, is on photos, consent and retention.

Who else handles it

We use a small number of companies to run the site. They get only what their job needs, they act on our instructions, and they may not use it for anything else. All of them process the data in the United States.

• Vercel — hosting, and storage for uploaded images.
• Neon — the database.
• Upstash — click counting and rate limiting.
• Stripe — payments. Your card details are handled by them, under their own privacy policy.
• Resend — sending email, including your sign-in links.
• OpenAI — the safe-or-unsafe check on an uploaded image, and nothing else.
• Sentry — error monitoring, configured to collect no cookies, no request bodies, no database values and no local variables.
• Google Workspace — the mailbox that receives your email when you write to us.

We will also hand over information where the law requires it, where we need to enforce our terms or protect somebody, and — if the business is ever sold — to whoever takes it on, under this same policy.

How long we keep it

Photos have their own schedule, published in full on photos, consent and retention. The short version is that a photo is destroyed immediately when you stop holding the spot — released, refunded, transferred or account deleted — with no grace period and no archive copy.

Your account and page data live for as long as your account does. Order records outlive it: we have to keep proof of what was paid for accounting, tax and disputes. Moderation results — the safe-or-unsafe answer and its date — are kept so that a rejection can be explained. If an account was suspended, the reason is kept as part of that account's history. Click counts and rankings belong to the wall and are not personal detail.

Email

Some email is the thing you just asked for and cannot be switched off: sign-in links, receipts, gift claim links, and messages about a purchase. Everything else — milestones, rank changes, friend requests and the like — can be. Every optional email carries an unsubscribe link that works in one tap without signing in, and the same switch is on your account page. Turning optional email off applies everywhere, on every wall.

Your choices and your rights

You can change or hide any field on your page at any time, turn off promotional use of your photo, replace your photo, unsubscribe from optional email, and delete your account yourself. Deletion is immediate and irreversible: your photo and background are destroyed, your page goes, and your number returns to the wall. What promotional use covers, and what a shared link exposes, is set out on social media.

You can also ask us — at support@1in1m.com — for a copy of what we hold about you, for a correction, or for something to be deleted. We will ask you to write from the address the account uses, because that address is the account.

If you are in California, you have the right to know what we collect, to have it deleted, to have it corrected, and not to be treated differently for asking. You also have the right to opt out of the sale or sharing of personal information — there is no link for that here because we do neither, so there is nothing to opt out of.

If you are in the UK or the EEA, note that 1in1m is aimed at and sold in the United States, and your data would be processed in the United States. If you use the site anyway, we rely on performing our contract with you in order to run your spot, on our legitimate interest in keeping the wall honest and secure, and on your consent for promotional use of your photo and for optional email. You can ask us to access, correct, delete or export your data, or to stop a particular use, at the address above.

Children

1in1m is not for anybody under 18, and we do not knowingly collect anything from them. If you believe a child has an account, or is in a photo on the wall, report it from the page itself or write to support@1in1m.com and we will remove it.

Security

There are no passwords on 1in1m, so there is no password of yours for anybody to steal. Sessions are held on our side rather than in a token, which means we can end one immediately. Traffic is encrypted. Access to the database is limited to the people who need it to run the site.

None of that is a guarantee. No service can promise it will never be breached and we will not pretend otherwise. If something happens that affects you, we will tell you.

One site, several country walls

1in1m runs a separate wall per country from the same system. Today that is the United States. Spots, leaderboards, contests and rankings belong to a wall; your account, your blocks and your email preferences are global and follow you across all of them.

Changes, and how to reach us

If this policy changes, the date at the top of the page changes with it. If we ever want to use information in a way this policy does not already describe, we will say so before we do it.

Questions, requests, or anything you are unhappy with: support@1in1m.com. A person reads that address.