LEGAL

Privacy Policy

This policy explains what personal information 100M PIXEL collects when you use 100mpixel.com, why we use it, who processes it for us, and the choices you have.

Last updated: October 7, 2026

Who we are

100M PIXEL ("we", "us") runs the pixel advertising marketplace at 100mpixel.com. For any privacy question or request, email [email protected].

Information we collect

Account information

  • Your email address and, if you choose one, a display name.
  • Your password, which we store only as a one-way hash. We never store it in readable form.
  • Two-factor authentication settings if you turn them on. The authenticator secret is stored encrypted and recovery codes are stored as hashes.
  • Password reset requests. We store a hash of the one-time reset token and its expiry, never the token itself.

Sign-in and security data

  • Session records: the IP address and browser user agent used to sign in, when the session was created, last used and when it expires.
  • Security and audit records of important actions (for example sign-ins, password changes, orders, payment events and admin actions), which can include IP address, user agent and the action taken.

Purchases and payments

  • Orders: the blocks you reserve or buy, their position and size, the price and the order status.
  • Crypto payment details from our payment provider: the invoice reference, token and network, amount, deposit address, payment status and, once paid, the blockchain transaction reference. Blockchain transactions are public by nature.
  • Card payments, where offered at checkout, are entered on Stripe's checkout page. We receive the payment status, amount and a payment reference, never your full card number.
  • We do not receive or store card numbers or wallet private keys.

Ad content you publish

  • For blocks you own: the title, the image you upload (with its file type, size and a checksum) and the destination link. This content is shown publicly on the canvas to every visitor.

Referrals, commissions and payouts

  • Your referral code and visits to your referral link (a hashed IP address, the browser user agent and the time).
  • Which referral, if any, brought you to 100M PIXEL, and when.
  • Commissions you earn, payout requests, the payout details you give us, and their review and payment status.

Content Studio

  • Topics you enter in the dashboard Content Studio and the drafts it produces for you.

Cookies and browser storage

  • Sign-in cookies: a short-lived access cookie (15 minutes) and a refresh cookie (up to 14 days, and never beyond the session's maximum lifetime), plus a short-lived cookie during two-factor sign-in. They are HttpOnly, so page scripts cannot read them, and they are needed for the site to work.
  • Local storage: if you arrive through a referral link, your browser keeps up to 5 referral codes for 30 days so the referral can be credited when you sign up.
  • We do not use advertising or cross-site tracking cookies.

How we use information

  • To create and secure your account, sign you in and keep you signed in.
  • To reserve blocks, take payments, confirm purchases and show your ad on the canvas.
  • To credit referrals, calculate commissions and process payouts.
  • To send service emails: password reset and password-changed notices, and purchase notices (block reserved, payment confirmed, ad live).
  • To prevent fraud and abuse, investigate security events and moderate ad content.
  • To keep financial and audit records and to meet legal obligations.

Service providers

We share information only with providers that run parts of the service for us, and only what they need:

  • Cloudflare: DNS, content delivery, security and hosting of the website. Cloudflare processes request data such as IP addresses and provides us with aggregate traffic statistics (Cloudflare Web Analytics).
  • Render: hosting of our application server (API).
  • A managed PostgreSQL hosting provider: storage of the database behind the service.
  • Cryptomus: crypto payment processing. Cryptomus handles your payment under its own terms and privacy policy.
  • Stripe: card payment processing, where card payment is offered at checkout. Stripe handles your card details under its own terms and privacy policy.
  • Resend: delivery of service emails.
  • Google Fonts: our pages load fonts from Google, so your browser connects to Google's font servers.

We may also disclose information when the law requires it, to protect the rights and safety of our users or of 100M PIXEL, or as part of a transfer of the business. We share personal information only as described in this policy.

YouTube and Google data

100M PIXEL uses YouTube API Services in an internal analytics tool that reads data about our own 100M PIXEL YouTube channel. This tool does not ask visitors or customers to connect their Google accounts.

  • Google account data is accessed only after the account owner grants access on Google's OAuth consent screen.
  • The access we request is read-only: youtube.readonly (channel and video details) and yt-analytics.readonly (channel and video performance reports).
  • We use this data only to analyse how our videos perform and to plan better content. With this read-only access the tool cannot upload, edit or delete videos.
  • Aggregate channel statistics are kept in a private code repository hosted by GitHub. Access credentials are stored as encrypted secrets and are never published.
  • You can revoke access at any time from your Google Account security settings, at myaccount.google.com/permissions.

100M PIXEL's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. See also the YouTube Terms of Service and the Google Privacy Policy.

Instagram and other Meta services are not connected at this time. We will update this policy before any such connection is enabled.

How long we keep information

  • Account information is kept while your account exists.
  • Sign-in sessions expire automatically; expired and revoked sessions stop working.
  • Ad content is kept while it is published on a block you own, or until it is removed.
  • Order, payment, commission, payout, ledger, audit and security records may be kept after an account is closed, for as long as needed for accounting, fraud prevention, dispute handling and legal obligations.
  • Referral codes in your browser expire after 30 days, or earlier if you clear your browser storage.

Security

We use HTTPS, hashed passwords, encrypted two-factor secrets, HttpOnly session cookies, optional two-factor authentication and audit logging. No system is perfectly secure, so we cannot guarantee absolute security.

Your choices and requests

  • You can edit your ad content, change your password and manage two-factor authentication from your dashboard.
  • You can ask us for a copy of your personal information, to correct it, or to delete it by emailing us.
  • To delete your account and data, follow the steps on our Data Deletion page.
  • Depending on where you live, you may have additional rights under local law.

Children

100M PIXEL is not directed to children, and you must meet the age requirement in our Terms of Service to create an account.

International processing

Our providers may process information in countries other than yours, including the United States.

Changes to this policy

We will update this page when our practices change and revise the "Last updated" date.

Contact

Email [email protected].