Privacy notice · version 2026-10-14
Your data, plainly.
A nickname is enough to join. We collect the least we can, publish only what you choose, and never sell data.
Who is responsible
The controller is the operator of TrillionEuro.com. The operator’s legal name and address are published here before paid entries open. Contact for anything privacy-related: privacy@trillioneuro.com.
What we collect and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Nickname, country, message | Publishing your entry, certificate and country count | Contract (b) |
| Real name (optional) | Kept privately with your entry; shown publicly only if you opt in | Contract (b); public display on your consent (a), which you can withdraw at any time |
| Email address | Receipt, entry management, answering requests; one notice if you join the waitlist | Contract (b); waitlist: consent (a) |
| Payment confirmation (amount, currency, Stripe IDs) | Issuing your entry, refunds, accounting | Contract (b); legal obligation (c) |
| IP address (transient) and a salted hash of IP + browser string | Rate-limiting and stopping referral fraud and spam | Legitimate interests (f) in protecting the record’s integrity |
| Reports, requests and contact messages | Moderation and answering you | Legitimate interests (f); legal obligation (c) for rights requests |
We do not infer your country from your location, build advertising profiles, or use your data for automated decisions with legal effects.
What is public
Entry number, nickname, country, message, entry date and, if you choose, your real name and referral title. Entry pages are kept out of search engines until a moderator approves them. Your email, private real name and payment details are never public, never in page metadata or share previews, and never sent to analytics.
Who processes it
- Supabase (database, hosted in the EU — Ireland) — processor.
- Vercel (hosting and privacy-friendly, cookie-free analytics) — processor; transfers outside the EEA are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
- Stripe (payments) — processes card data under its own terms as an independent controller for payment data. We never see or store your card number.
How long we keep it
- Unpaid drafts: deleted after 30 days.
- Entries: for as long as the record is published, unless you ask us to remove or erase them.
- Payment and accounting records: 6 years, as Irish tax law requires — even after an entry is removed (stripped of anything not needed for that purpose).
- Rate-limit data: hours. Referral-visit hashes: 12 months.
- Waitlist emails: until the notice is sent, then deleted.
- Reports, requests and messages: up to 24 months.
Your rights
You can ask to access, correct, erase, restrict or port your data, object to processing based on legitimate interests, and withdraw consent at any time (for example, hide your real name). Use your management link, the request form, or email us. We answer within one month. Erasure removes your personal data from the public record; your entry number stays retired and the minimal payment record is kept for the period the law requires. You can complain to the Data Protection Commission (Ireland) at dataprotection.ie.
Cookies and storage
We set no tracking cookies. See the cookie notice for the small amount of browser storage the site uses.
Children
Paid entries are for adults (18+). We don’t knowingly collect data from children.
Changes
We’ll date any change here and, for material changes, tell entry holders by email.