What the wall knows about you.

LAST UPDATED 21 JUL 2026

MillionWall (millionwall.com) is a service of RapidDev, Evertsenlaan, 8323 BE Urk, the Netherlands (Chamber of Commerce 99986272, VAT NL005423217B65). The data controller is RapidDev. Contact: info@rapiddev.nl. This page explains what we store, why, and what your rights are under the GDPR.

What we store

Your email address - used to log you in (magic link or Google sign-in), to send purchase receipts and login links, and to tie your pixels, subscription and monthly bonus pixel to you. Never shown publicly, never sold.
What you put on the wall - the name, link, message and image you attach to a plot are public by design: that is the product. Think before you publish; the wall is visible to everyone.
Uploaded images - every image is re-encoded and sharpened to fit its plot exactly before it appears on the wall. EXIF metadata (camera, location and other embedded data) is removed in the process.
Payment records - payments and subscriptions run through Mollie (Mollie's privacy policy). We never see or store your card number or bank credentials; we store the amount, the payment reference and its status.
Payout details - when you request a referral payout, we store your IBAN to process the bank transfer. The payout history (amount, date and status) is kept for accounting and tax purposes.
Technical data - IP addresses are used in memory for rate limiting and abuse prevention and are not written to the database. Standard server logs rotate automatically.

Public profiles, badges and leaderboards

Your first purchase publishes a public owner profile at /u/<your-handle>. It shows your handle, display name, plots, badges and the date you joined - never your email address. Badges are derived from purchase behavior, such as how early you bought, how much territory you hold and whether you subscribe. The Wall of Fame and its leaderboards rank owners publicly by territory, spending, plots, subscriptions and recent purchases. All of this is part of the product: the wall is a public record.

Approximate location

When you buy pixels we derive your approximate country and city from your IP address at checkout, and we show that origin on your plot and in the recent-purchases ticker - like a guestbook ("From Amsterdam, Netherlands"). The IP address itself is never stored, and the derived location is approximate, never exact.

Referral program

Every owner gets an invite link. When someone buys through it, both sides receive a free pixel. To remember which link brought a visitor in, we place a first-party mw_ref cookie holding only the referral code; it lasts 30 days, carries no personal data and is never shared with third parties. Visiting an invite link is enough to place it; only a purchase activates the reward.

Cookies

Two first-party cookies, and nothing else. A functional cookie (mw_session) keeps you logged in for up to 90 days. The referral cookie (mw_ref, see above) remembers an invite code for 30 days. No tracking cookies, no analytics cookies, no third-party advertising. That is the whole list.

Sign in with Google

If you use Google sign-in we receive only your verified email address from Google - nothing else from your Google account.

Email

How long we keep things

Purchased pixels and what you placed on them are permanent - that is the promise of the wall. Login sessions expire after 90 days; login links after 15 minutes. If you want your email address removed or anonymized, write to hello@millionwall.com; note that the public content of purchased plots is part of the service you bought.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, and you can object to processing. Mail hello@millionwall.com. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).