Privacy Policy

This page explains what data Monumentas collects when you use the site, why we collect it, and what rights you have over it.

Who we are

Monumentas ("we", "us") operates the Monumentas website. We are building a shared, permanent canvas for the world, a place where anyone can claim a small piece of a cube, show that they were here, and leave a mark that is meant to outlive us all. What we are making is not for us, it is for everyone, and for the people who come long after. For any privacy question, you can contact us on Instagram at @mrquaetfaslem.

What we collect

• Account info: when you sign in with Google, we receive your name, email address, and profile photo, through Firebase Authentication.
• Purchase records: the space you bought (position, size, and price), and which account owns it.
• Content you upload: the image and the links you choose to display on your space.
• Payment: we never see or store your card details. Payment is handled entirely by Stripe, and we only receive confirmation that a payment succeeded and its amount.
• Usage stats: how many times each space is viewed and how many times its links are clicked, kept as simple counts so we can share them with space owners. We use no third party trackers and no cookies for this.

We do not run advertising trackers or analytics cookies on this site.

Why we process it

• To create and display your purchased space (performance of a contract).
• To let you sign back in and manage your space later.
• To enforce our Community Rules (legitimate interest).
• To process payment securely through Stripe (performance of a contract).

Who we share it with

We use a small number of infrastructure providers to run Monumentas, each of which processes data on our behalf under their own data protection terms:

• Google Firebase: authentication, database, file storage, hosting, and server functions.
• Stripe: payment processing.
• Google reCAPTCHA & Firebase App Check: automated abuse and bot protection. To confirm that requests come from a real browser rather than a script, Google processes technical signals such as your IP address and interaction data, under Google's own terms. This is used only for security, not for advertising or analytics.

We do not sell your data, and we do not share it with anyone else.

How long we keep it

Since the whole point of Monumentas is a permanent space, purchase records are kept indefinitely. If you ask us to delete your account data, we will remove your personal details and take down your image and links, but we may retain the underlying transaction record where we are legally required to, for example for accounting and tax obligations.

Your rights

If you are in the EU or EEA, or anywhere with similar protections, you have the right to access, correct, delete, or export your personal data, and to object to how it is processed. To exercise any of these, message us on Instagram at @mrquaetfaslem. You can also lodge a complaint with your local data protection authority.

Security

Data is protected with access controlled databases (Firestore and Storage security rules), encrypted in transit with HTTPS and at rest with Google Cloud default encryption. Your card details never reach our servers at all, because Stripe, which is PCI DSS certified, handles that directly.

Children

Monumentas is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes in a meaningful way, we will update the date at the top of this page.