Privacy Policy

1. Who We Are

Million Tower ("we", "us", "our") operates the website milliontower.com. This Privacy Policy explains how we collect, use, and protect your personal data when you use our platform.

2. Data We Collect

We collect the following information when you register or use Million Tower: • Email address (used to identify your account and send communications) • Alias / username (publicly displayed on the leaderboard) • Authentication method (email/password, Google, or X/Twitter) • Game progress (current floor, answer attempts, lockout status) • Payment information (processed exclusively by Stripe or your crypto wallet — we never store card numbers) • Advertising content (images and URLs you upload to the canvas) • IP address and session data (collected automatically by our servers)

3. How We Use Your Data

We use your data to: • Create and manage your account • Operate the platform and track your progress • Process payments and deliver prizes • Display your alias on the public leaderboard • Send transactional emails (email confirmation, prize notifications) • Comply with legal obligations

4. Third-Party Services

We share data with the following trusted third parties, only to the extent necessary: • Stripe — payment processing (PCI-DSS compliant; we never see your card data) • Google / X (Twitter) — OAuth login (only if you choose to sign in with these providers) Each of these services operates under its own privacy policy.

5. Data Retention

We keep your personal data for as long as your account is active. If you request account deletion, we will delete your profile data within 30 days. Payment records may be retained for the period required by tax law.

6. Your Rights

Regardless of the country you reside in, you have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your data • Request restriction of processing • Data portability To exercise any of these rights, contact us at privacy@milliontower.com.

7. Cookies and Sessions

We use session cookies to keep you logged in. These are strictly necessary for the site to function and do not track you across other websites. We do not use advertising or analytics cookies.

8. Security

We use industry-standard security practices including HTTPS, encrypted password storage, and row-level security on our database. We encourage you to use a strong, unique password.

9. Children

Million Tower is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has registered, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes. Continued use of the platform constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests: Email: privacy@milliontower.com