Privacy Policy
We are committed to handling your personal data with care and transparency. This policy explains what we collect, why we collect it, and your rights.
Last updated: 23 May 2026
1. Who we are
onemillion.earth is a climate finance platform operating as a trading name, based in England. We are the data controller for the personal data collected through this website. For any privacy questions, contact us at privacy@onemillion.earth.
2. What data we collect
We collect the minimum data needed to process your purchase and issue your certificate.
| Data | Required? |
|---|---|
| Your name or display name | Yes (or 'Anonymous') |
| Email address | Yes |
| Organisation name | No |
| Country | Auto-detected from Stripe |
| Payment information | Yes — via Stripe |
| Certificate ID | Auto-generated |
We do not collect any data beyond what is listed above. We do not use analytics cookies or third-party tracking software.
3. How we use your data
- To process your tile purchase and direct funds to the registry
- To generate and issue your certificate of verified climate action
- To send a confirmation email with your certificate details and link
- To display your name (or 'Anonymous') on the canvas and leaderboard
- To fulfil our registry retirement commitment within 30 days
We do not use your data for advertising, profiling, or any purpose beyond the above. We will never sell your data to third parties.
4. Where your data is stored
Supabase
Purchase records (name, email, tile count, certificate ID, country) are stored in a Supabase PostgreSQL database hosted on AWS in the EU region. Your email address is stored server-side only and is never exposed in client-side code.
Supabase Privacy Policy ↗Stripe
Payment processing is handled entirely by Stripe. We do not store card numbers or full payment details. Stripe is PCI DSS compliant.
Stripe Privacy Policy ↗Resend
Confirmation emails are sent via Resend. Your name and email are passed to Resend for this purpose only.
Resend Privacy Policy ↗Vercel
The website is hosted on Vercel. Vercel may process standard web request data (IP addresses, request logs) as part of serving the site.
Vercel Privacy Policy ↗5. Data retention
Purchase records — including your name, email, tile count, and certificate ID — are retained as part of the permanent public climate action record. This is necessary to maintain the integrity of the canvas and leaderboard, and to allow independent verification of funded credits.
If you would like your name displayed as “Anonymous” retrospectively, contact us at privacy@onemillion.earth and we will update your record. Your email address will not be displayed publicly under any circumstances.
6. Cookies
onemillion.earth does not use analytics or advertising cookies. We use only the technical cookies that Stripe requires to operate its payment checkout.
Because we do not use non-essential cookies, no cookie consent banner is required. If we add analytics in future, this policy will be updated and a consent mechanism introduced.
7. Your rights under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
Right to access
You can request a copy of the personal data we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete data.
Right to erasure
You can request deletion of your personal data, subject to our obligation to maintain the climate action record.
Right to restrict processing
You can ask us to limit how we use your data in certain circumstances.
Right to object
You can object to processing of your data in certain circumstances.
To exercise any of these rights, email privacy@onemillion.earth. We will respond within 30 days. If you are unhappy with our response, you may lodge a complaint with the Information Commissioner's Office (ICO).
8. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available at onemillion.earth/privacy. If we make significant changes we will notify buyers via email.
9. Contact us
For any privacy queries or to exercise your rights:
privacy@onemillion.earthWe aim to respond within 5 business days.