Legal

Privacy Policy

Last updated: 2026-06-01 · Applies to all users of oneinchonedream.com

1. Who We Are

oneinchonedream.com ("Site", "we", "us") is a digital advertising canvas platform operated by an individual ("Andrew"). We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

Contact: oneinchonedream@gmail.com

2. Minimum Age

This Site is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately.

3. Data We Collect and Legal Basis (GDPR Art. 6)

3a. Purchase Data

When you make a purchase, we collect: your name or brand (as submitted), website URL (optional), message (optional), emoji (optional), canvas coordinates of your block, and purchase amount.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) — necessary to fulfill your purchase and display your block on the canvas.

3b. Payment Data

Payments are processed by our payment providers (monobank, PayPal, NOWPayments). We do not store your full card number, CVV, or banking credentials. We receive: a transaction ID, payment status, purchase amount, and (if provided) your email address for receipt purposes.

Legal basis: Performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)) — financial record-keeping requirements.

3c. Canvas Display Data

The name, emoji, message, and URL you submit are displayed publicly on the canvas. This data is stored in Firebase Firestore.

Legal basis: Performance of a contract (Art. 6(1)(b)) — you explicitly submitted this content to be shown on the canvas.

3d. Technical / Analytics Data

We may collect standard server logs including IP addresses, browser type, referring URLs, and pages visited. We use Firebase (Google) for hosting and database services.

Legal basis: Legitimate interests (Art. 6(1)(f)) — to maintain Site security, prevent fraud, and understand how the Site is used.

4. Payment Data Processing

Card payments are processed by monobank (Plata by Mono), a licensed Ukrainian payment institution regulated by the National Bank of Ukraine and PCI-DSS compliant. monobank acts as a data processor for card transactions and handles payment card data in accordance with its own privacy policy. PayPal and NOWPayments (for crypto) process payments under their respective privacy policies.

We strongly encourage you to review our payment processor's privacy policy before making a purchase.

5. Cookies

We use the following cookies and similar technologies:

Firebase / Authentication cookies: Used to maintain session state and Site functionality. These are strictly necessary.
Payment cookies: Set by monobank and PayPal during checkout for fraud prevention and payment processing. Necessary for the payment flow.
Google Analytics (consent-based): We use Google Analytics 4 only after you click "Accept" on our cookie banner. If you click "Decline", no analytics cookies are set. IP addresses are anonymized.

6. How We Use Your Data

We do not sell your personal information to third parties.

To process and fulfill your purchase (display your block on the canvas)
To communicate with you about your order (if you provide an email)
To maintain records required by financial and tax regulations
To prevent fraud and ensure Site security
To comply with legal obligations

7. Data Retention

Canvas display data (name, emoji, message, URL, coordinates): For the operational lifetime of the platform.
Transaction records (order ID, amount, payment status): 7 years, as required by applicable financial/tax regulations.
Legal consent records (withdrawal waiver timestamp): 5 years, to demonstrate compliance with EU/UK consumer law.
Server logs: 90 days, then automatically purged.

8. Your Rights (EU/UK — GDPR)

If you are located in the European Union or United Kingdom, you have the following rights regarding your personal data:

Right of access: Request a copy of your personal data we hold
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your personal data. Note: canvas display data is part of the purchased service; financial transaction records must be retained for legal compliance.
Right to data portability: Receive your data in a structured format
Right to object: Object to processing based on legitimate interests

9. California (CCPA) Rights

California residents have the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of sale (we do not sell personal information). To exercise your rights, contact us at oneinchonedream@gmail.com.

10. International Transfers

Card payments are processed by monobank in Ukraine. Other services we use — Google Firebase (hosting/database), Vercel (hosting), PayPal and NOWPayments (payments) — may process data internationally, including in the United States. For users in the EU/UK, where data is transferred outside the EEA, such transfers rely on appropriate safeguards under GDPR Chapter V, including Standard Contractual Clauses (SCCs) or adequacy mechanisms provided by these third-party processors.

11. Third-Party Services

monobank (Plata by Mono): Card payment processing. Licensed Ukrainian payment institution, PCI-DSS compliant. Privacy policy available on monobank's website.
NOWPayments: Cryptocurrency payment processing. Privacy policy available on nowpayments.io.
Firebase / Google Cloud: Database (Firestore), image storage, hosting. Google Privacy Policy: policies.google.com/privacy
Our payment processor: Card processing for secure card payments.
PayPal: Payment processing alternative. PayPal Privacy Policy: paypal.com/webapps/mpp/ua/privacy-full
Google Analytics: Consent-based usage analytics (only after you Accept).
Vercel: Hosting and CDN. Vercel Privacy Policy: vercel.com/legal/privacy-policy

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Site. Continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact

For all privacy-related inquiries, requests, or complaints: oneinchonedream@gmail.com