Privacy Policy
Last updated: 12 November 2026
Shabaka LLC ("we") operates The Digital Monument. This policy explains what personal data we process and why.
What we collect
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address (purchasers) | Receipts, review updates, refunds, support | Contract |
| Display name, image, link you submit | Showing your placement | Contract |
| Order details (area, amount, status, Stripe references) | Fulfilling and accounting for purchases | Contract, legal obligation |
| When you accepted our terms and asked for immediate processing | Proof of your consents at checkout | Legal obligation, legitimate interests |
| Payment details and billing location | Processed by Stripe; we do not receive full card numbers. Stripe may ask for your country and postal code to apply the correct sales tax or VAT | Contract, legal obligation |
| Report details and optional reporter email | Handling content reports | Legitimate interests |
| Salted hashes of IP addresses | Abuse prevention and rate limiting | Legitimate interests |
| Administrator accounts and audit logs | Security and accountability | Legitimate interests |
We do not use advertising trackers or sell personal data. Only strictly necessary cookies are used, for administrator sign-in.
What is public
Only your display name, image, and approved link are public. Your email address and order details are never shown publicly.
Processors
- Stripe (payments)
- netcup GmbH, Germany (the server that runs the website and its database)
- Cloudflare (DNS and network security; R2 storage for images and encrypted database backups)
- Resend (sending order and review emails)
- Zoho Mail (our support mailbox, when you email us)
Some processors are located outside your country. Where personal data is transferred outside the UK or the European Economic Area, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or the processor's certification under the EU-US Data Privacy Framework.
Retention
- Order and payment records, including consent records: 7 years, for tax and accounting.
- Uploaded images that never became part of a paid order: deleted after about 48 hours.
- Rejected or removed images: deleted when no longer needed for the moderation record, at most 90 days, unless required for legal claims or reporting illegal content.
- Rate-limit records: about 24 hours.
- Audit logs: 2 years.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your data, and to data portability. Email support@milliondigitalmonument.com to make a request. You may also complain to your data protection authority.
Security
Data is encrypted in transit (HTTPS). Our providers encrypt stored data at rest. Access to administration requires two-factor authentication.
Contact
The controller of your personal data is Shabaka LLC, 30 N. Gould St., Sheridan, WY 82801, United States. For privacy questions and requests, email support@milliondigitalmonument.com.