Privacy

1. Who we are

Planet Million is run by Alexei Stavila, trading as Planet Million, 49 Station Road, Polegate, East Sussex, BN26 6EA, United Kingdom. We are the controller of the personal data described here. Contact us about it at hello@planetmillion.com.

2. What we collect and why

• Your email address, if you give it: to send your receipt, your claim links and notices about your residency, and to reply to you. We need it to perform our contract with you.
• Your country, from your billing details or your connection: to charge the right VAT and keep the records tax law requires.
• Card and billing details go to Stripe, never to us. Stripe processes them to take the payment and prevent fraud, as its own controller, under Stripe’s privacy policy.
• Wallet addresses: the wallet a crypto payment came from (to match it to your order and refund it if needed), and the wallet you ask us to move your residency to. We screen paying wallets against the US sanctions list, as the law requires of us. If we create a wallet for you, it is made in your browser and only its address reaches us, never its recovery phrase.
• A scrambled form of your IP address (a keyed hash, never the address itself) when you hold a number or send a report: to limit abuse. This is our legitimate interest in keeping the site working fairly.
• Your consent record: when you ticked the box to start at once at checkout, as proof for your right to cancel.
• What you write in a report or appeal, and the name and email on a removal request: to decide it and reply, as the EU Digital Services Act and the US TAKE IT DOWN Act require.

No decision about you is made by automated means alone. A person reviews every report and appeal.

3. Who processes it for us

• Clever Cloud (France): hosting and our database. Its servers keep short-lived logs that include IP addresses.
• Stripe (Ireland and the US): card payments and VAT calculation.
• Resend (US): sending our emails.
• Alchemy (US): our connection to the blockchains. It sees our server’s requests, not your browser’s.
• ArDrive Turbo (US): storing each residency’s nickname and avatar data on Arweave. We send it no personal data.

Stripe and Resend are certified under the EU–US Data Privacy Framework and its UK extension, and our transfers to them rely on that. Transfers to Alchemy rely on the EU standard contractual clauses and the UK addendum to them, in its data processing agreement.

4. The blockchain

Your residency’s number, nickname, avatar and the wallet holding it are public on Solana and Arweave, for good, and nobody, including us, can change or delete them. None of that is personal data unless you make it so: if you move your residency to your own wallet, anyone can see that wallet holds it. A crypto payment is public on its blockchain too, as every payment there is.

5. How long we keep it

• Order and payment records, with your email and wallet addresses: 6 years, for tax and accounting. Then we delete your email.
• Reports, appeals, removal requests and the emails about them: 2 years after the decision, in case of a legal claim.
• Copies of the emails we send you: 2 years.
• The scrambled form of your IP address: 90 days.
• A number you held but didn’t buy: deleted within a day.

We keep records about suspected child sexual abuse material for as long as the authorities need them.

6. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to have it in a portable form. Write to hello@planetmillion.com; we reply within one month. Some data we must keep for the periods above, and we can’t change anything on the blockchain.

You can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live in the EU.

7. Cookies

We use only the cookies the site needs to work, and Stripe uses its own during card checkout. See cookies.

8. Changes

We’ll update this page if anything changes, and say at the top when it last did.