Privacy Policy

Draft · not yet effective

This Privacy Policy explains what PYRAMIDIOCY (the “Site”) collects, why, how long it keeps it, and what it never touches. The short version: we keep as little as the monument can run on, and none of it is for advertising. “We,” “us,” and “the pyramid” mean the operator of the Site, who is the data controller for this data.

1. What we collect, and why

• Your brick (public, on purpose). The content you inscribe: a display name, an optional decree, a color, a mason’s mark, an optional link (unlocked at the threshold stated at checkout), plus your tribute amount, rank, caste history, and timestamps. This is displayed publicly — being seen is the entire point of a monument. Do not put anything in a name or decree you want kept private. Why we process it: to perform the contract you asked for.
• Email — only if you give it. The checkout form has an optional email field for class-mobility notices (we email you when the monument shifts beneath you — which is to say, when strangers outrank you). We store the address you provide and use it for those notices and for your receipt. The Site works fine without it. Why: your consent, given by providing the address for that stated purpose; receipts are part of performing the contract. Every notice contains a working unsubscribe.
• The consent record. When you lay or raise a brick you confirm the finality of tributes (the checkbox at checkout). We log that acceptance with a timestamp, your IP address, and the checkout session identifier, alongside the brick. Why: our legitimate interest in proving what you agreed to — this is the record we show a card issuer when someone claims they never agreed. The pyramid keeps receipts about its receipts.
• Refund and dispute records. We retain provider event and transaction identifiers, amounts, reasons and status changes alongside the existing payment and consent records. These records support payment corrections, dispute resolution and review of suspected abuse. They are private, follow our payment-record retention policy, and are not a public list of customers. We do not automatically ban a visitor merely for cancelling checkout, receiving a refund, sharing an IP address or linking to the same website as someone else.
• Content checks before checkout. We check submitted public names, inscriptions and website addresses for prohibited content. If the optional OpenAI moderation service is enabled, we send that proposed public copy to OpenAI for a safety check; we do not include your email, IP address or payment details in that request. Local rules also run without that service. These checks do not certify the content of an external website.
• Payment information — handled by Stripe. Payments are processed by Stripe. Your card number and payment credentials go to Stripe, not to us. We receive back confirmation and limited transaction metadata (an identifier, the amount, and the email if you gave one) so we can record that a tribute was paid. Why: performing the contract; keeping tax and accounting records the law requires.
• The living audience — a number, not you. While you have the Site open, our live layer counts concurrent visitors and may show that count to everyone (as ambient fireflies, among other theater). The count is an integer. No name, no identifier, no location — the other visitors know only that someone is there, which is all the pyramid knows either. Why: legitimate interest in the Site being alive.
• Server logs. Our infrastructure keeps standard, short-lived request logs (IP address, user agent, pages fetched, errors) used to keep the Site up, rate-limit abuse, and investigate attacks — then discarded. We do not build profiles from them. Why: legitimate interest in security and operations.

2. What we do NOT collect

• No accounts, no passwords, no identity or age verification. We do not ask for or check government ID, date of birth, or proof of age. The Site is 18+ by contract (see the Terms), not by ID check.
• No uploads. There is no way to upload an image, file, or document. Customization is a curated palette, a curated mark, a name, and a decree — text and a color, nothing else.
• No ad tech. No advertising cookies, no third-party trackers, no cross-site anything, no analytics profiles of you.
• No sale or sharing of your data. We do not sell your personal information and we do not share it for cross-context behavioral advertising, in the California senses of those words or any other sense. Because we do not track you across sites, there is nothing for a “Do Not Track” or Global Privacy Control signal to turn off; we note them and they change nothing, because the tracking they object to does not exist here.

3. Storage on your device

Your device remembers your brick so you don’t have to sign in. We use browser localStorage for functional flags only — for example: pyramid.mineId (which brick is yours on this device), pyramid.hintSeen and pyramid.sandConsent (which notices you’ve dismissed), and a small family of pyr-… keys that let the sky’s wonders remember your visits (the moon counts your nights; this is a joke that requires a counter). Site staff have one extra key for the admin door. None of these identify you, none are advertising trackers, and none leave your device. You can clear them in your browser at any time; the monument will forget it knew this device, and your brick will stand unbothered.

4. Service providers (processors)

We rely on a small set of providers to run the Site, each processing only what its job needs, on our documented instructions:

• Stripe — payment processing and fraud screening. Your payment details go to Stripe under its own terms and privacy policy.
• Resend — email delivery, if you opted into notices or receive a receipt.
• Hosting and database providers (currently Vercel for hosting and a managed Postgres provider for storage) — to serve the Site and store bricks.

These providers are not permitted to use your data for their own unrelated purposes. We add no others without updating this page.

5. How long we keep things (retention)

• Brick content: as long as the brick stands on the monument — which is intended to be a very long time; permanence is the product (subject to our removal right in the Terms).
• Payment records and the consent record: for as long as tax, accounting, and dispute-defense obligations require — typically up to seven years after the transaction.
• Email address: until you unsubscribe from notices and have no undelivered receipt pending, or until you ask us to delete it. If you unsubscribe, we keep the address on a suppression list whose only function is remembering not to write to you.
• Server logs: on the order of days to a few weeks, longer only if needed for an active security investigation.

6. Where the data lives

We operate from the United States and our providers process data there (and in their own regions under their own compliance programs). If you buy from outside the US, your data crosses a border to reach a pyramid that is, itself, an homage to a structure on a third continent. Our providers use recognized transfer mechanisms for such data where the law requires them.

7. Children

The Site is for adults and is not directed to children. We do not knowingly collect personal information from anyone under 13 (or the applicable higher minimum age where you live), and the Terms require buyers to be 18+. If you believe a child provided us information, contact us (Section 10) and we will delete it promptly.

8. Your rights, honestly sized

Depending on where you live (the EU/EEA, UK, California, and a growing list of states), you may have rights to access, correct, delete, or receive a copy of personal information, to object to or restrict certain processing, and to complain to your local supervisory authority. Our practice is simpler than the map: we extend the same courtesies to everyone, threshold or no threshold:

• Unsubscribe from notices any time via the link in any notice — honored promptly and automatically.
• Access or delete the personal data we hold (your email, your consent record where the law lets us release it, your brick inscription) by emailing us from the address on file or with proof of the checkout session — that matching is our verification, since we have no accounts and refuse to collect more data just to identify you for a deletion. We answer within the time your local law sets, and in no case slower than 45 days.
• Know that some things stay: transaction and consent records we must keep for tax, accounting, and dispute defense are retained even after a deletion request, and deleting your email does not un-lay a brick. Tributes are final and non-refundable (see the Terms); privacy rights are rights about data, not a side door in the monument.
• Brick removal: the brick is a purchase you made public on purpose, but if you want your name or decree blanked or your brick hidden, ask — we can strike the inscription while the stone stays. We do not restore struck inscriptions, and no refund attaches.

We do not discriminate against anyone for exercising a privacy right. The castes discriminate by tribute only, which is the product.

9. Security

We use reasonable technical and organizational measures scaled to the little we keep: payment credentials never touch our systems (Stripe holds those), admin doors are token-locked and fail closed, and data in transit is encrypted. No system is perfectly secure, and we cannot guarantee absolute security; we can guarantee there is very little here to take.

10. Contact

Privacy questions and rights requests go to support@pyramidiocy.com. For the rules of the monument, see the Terms of Service.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Effective” date above, and for material changes we will post a notice on the Site. Continued use of the Site after a change means you accept the updated Policy. The pyramid does not surprise people with paperwork; surprises are reserved for the sky.

Customer support: support@pyramidiocy.com · (844) 354-BRIX

Make your mark. Climb the monument.