One Million Cells
Return to Grid
DATA PROTECTION

Privacy Policy

Last Updated: October 19, 2026 • Compliant with GDPR & CCPA

1. Introduction & Scope

At One Million Cells (“we,” “our,” or “us”), we respect your personal privacy. This Privacy Policy describes how we collect, use, store, and disclose information when you visit our official website at https://1mcells.com, interact with the interactive canvas, or claim cells as assets on the living grid.

By using One Million Cells, you consent to the data collection and usage practices described in this policy.

2. Information We Collect

A. Public Asset Metadata

When you claim an asset on the grid, your submitted asset image, asset title, description, and hyperlink become publicly visible on the canvas and in public leaderboards. Your account email and display name are used for ownership, receipts, and your private owner dashboard; they are not displayed on the public grid.

B. Account & Order Email

When you initiate a checkout session, we collect your email address solely to associate your asset with your owner dashboard and to send transaction confirmations. We never sell, rent, or trade your email address to advertisers.

If you use an asset’s one-time relocation, we retain an internal audit record containing the asset ID, account ID, old and new coordinates, and timestamp. This record is used for support, abuse prevention, and dispute resolution, and does not include your IP address or email address.

C. Technical & Canvas Analytics

We collect anonymous technical metrics such as browser type, operating system, approximate geographic region (via Cloudflare edge routing), and click counts on grid assets to maintain leaderboards and platform health.

We also record first-party funnel steps such as page views, opening the purchase dialog, checkout submission and response, fulfillment, dashboard visits, and asset opens. These records use a random identifier stored in your browser and do not include your IP address, email address, or account identifier. Your browser’s Do Not Track and Global Privacy Control signals are honored for this measurement.

D. Safety & Legal Disclosures

We may access, preserve, and disclose account and asset information to law enforcement, courts, or safety organizations (including the NCMEC CyberTipline) when required by law or when we believe in good faith that disclosure is necessary to prevent harm, investigate illegal content, enforce our Terms, or protect the rights and safety of users and the public. Abuse reports and related records may be retained for these purposes. If you submit an abuse report, we collect the report details and any contact information you choose to provide so we can investigate and respond.

3. Payment Processing & Waffo Merchant of Record

We do not collect or store full credit card numbers, debit card numbers, or banking CVV codes on our servers.

All payment transactions conducted via card, Apple Pay, and Google Pay are handled directly by our Merchant of Record, Waffo. Waffo manages global VAT/sales tax compliance and payment data.

For further information regarding how Waffo processes payment and billing information, please consult Waffo’s official Privacy Policy at https://waffo.com/en/privacy-policy.

4. Cookies & Browser Storage

We use browser localStorage and lightweight session cookies strictly to enhance your canvas experience:

  • Saving your canvas zoom level, panning coordinates, and audio toggle preference.
  • Storing your temporary reservation lock while you complete checkout.
  • Storing a random anonymous identifier used only to join first-party funnel steps; it is not linked to your account email.
  • Caching spatial chunk imagery to deliver fast canvas performance without repeated network requests.

5. Your Data Protection Rights (GDPR & CCPA)

Depending on your jurisdiction (including the European Economic Area, United Kingdom, and State of California), you possess specific rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure: Request the deletion of your account and personal identifiers (“Right to be Forgotten”).
  • Right to Opt-Out: We do not sell personal information to third parties.

To exercise any of these statutory rights, please contact our privacy desk at support@1mcells.com.

6. Contacting the Data Protection Officer

If you have questions, comments, or data requests concerning this Privacy Policy, please email our support and compliance team:

Platform: One Million Cells

Official Website: https://1mcells.com

Email: support@1mcells.com

Response Time: Within 24–48 business hours