Privacy Policy

Effective: September 10, 2026

This Privacy Policy explains what The Pyramid (the “Site”) collects, why, how long it keeps it, and what it never touches. The short version: we keep as little as the monument can run on and do not use it for cross-site behavioral advertising. “We,” “us,” and “the pyramid” mean the operator of The Pyramid, who is the data controller for this data.

1. What we collect, and why

• Your brick (public, on purpose). The content you inscribe: a display name, an optional decree, a color, an optional link (unlocked at the threshold stated at checkout), plus your tribute amount, rank, caste history, and timestamps. This is displayed publicly — being seen is the entire point of a monument. Do not put anything in a name or decree you want kept private. Why we process it: to perform the contract you asked for.
• Email. Stripe may collect an email for payment communications and receipts under its own settings. If you contact support, we use your address to reply and resolve your request. Browsing does not require an email. We do not send rank-change or class-mobility notices. Why: payment communications and customer support help us perform the contract and resolve purchase issues.
• The consent record. When you lay or raise a brick you confirm the finality of tributes (the checkbox at checkout). We log that acceptance with a timestamp, your IP address, and the checkout session identifier, alongside the brick. Why: our legitimate interest in proving what you agreed to — this is the record we show a card issuer when someone claims they never agreed. The pyramid keeps receipts about its receipts.
• Refund and dispute records. We retain provider event and transaction identifiers, amounts, reasons and status changes alongside the existing payment and consent records. These records support payment corrections, dispute resolution and review of suspected abuse. They are private, follow our payment-record retention policy, and are not a public list of customers. We do not automatically ban a visitor merely for cancelling checkout, receiving a refund, sharing an IP address or linking to the same website as someone else.
• Content checks before checkout. We check proposed public display names, contributor names, inscriptions and website addresses for prohibited content. Draft checks use local rules. At checkout, if the OpenAI moderation service is enabled, we send the proposed public copy to OpenAI for a safety check; we do not include your email, IP address or payment details in that request. Local rules also run without that service. These checks do not certify the content of an external website.
• Payment information — handled by Stripe. Payments are processed by Stripe. Your card number and payment credentials go to Stripe, not to us. We receive back confirmation and limited transaction metadata (an identifier, the amount, and the email if you gave one) so we can record that a tribute was paid. Why: performing the contract; keeping tax and accounting records the law requires.
• The living audience. Other visitors may see an aggregate audience count. We also process connection information, including IP-based limits, to prevent abuse. Individual connection information is not published. Why: legitimate interest in operating and protecting the Site.
• Server logs. Our infrastructure keeps standard, short-lived request logs (IP address, user agent, pages fetched, errors) used to keep the Site up, rate-limit abuse, and investigate attacks — then discarded. We do not build profiles from them. Why: legitimate interest in security and operations.

2. What we do NOT collect

• No accounts, no passwords, no identity or age verification. We do not ask for or check government ID, date of birth, or proof of age. The Site is 18+ by contract (see the Terms), not by ID check.
• No uploads. There is no way to upload an image, file, or document. Customization consists of a name, a decree, a chosen color, and an eligible website link.
• No ad tech. We do not use advertising cookies or cross-site behavioral advertising trackers.
• No sale or behavioral advertising. We do not sell your personal information and we do not share it for cross-context behavioral advertising. Service-provider processing is described below. The Site does not conduct cross-site behavioral advertising. Site audience analytics are suppressed when Do Not Track or Global Privacy Control is enabled. We also honor a previously saved analytics decline in this browser.

We use cookie-free Vercel Web Analytics for aggregate visit counts, referring sites, device and browser statistics, and three purchase-funnel events. We do not use session replay or record form fields, page text, clicks or scrolling as a recording. We do not send names, inscriptions, email addresses, payment details or brick identifiers as custom event properties. Vercel processes request information to produce aggregate statistics; its visitor identifier is discarded after 24 hours. See Vercel's analytics privacy information. Browser privacy settings and blockers can reduce these counts. Analytics events are not proof of payment: paid orders are verified separately in our payment records.

3. Storage on your device

Your browser may store functional preferences, a remembered brick ID, and an unpaid draft containing the name, inscription, website, amount and color you chose. A saved draft is local until you use it in a request, such as a content check or checkout. A remembered brick ID can be used to retrieve that brick. We do not use these entries for cross-site advertising. Anyone using the same browser may be able to read the saved draft. You can remove it through the site controls or browser settings. Clearing local storage does not remove a paid brick. When analytics is enabled, temporary tab storage keeps the approved campaign label and prevents counting the same payment return twice. The payment identifier used for that check stays in your browser and is not sent as an analytics event property.

4. Service providers

We use providers to process payments, host the Site, store records and handle support. Depending on the service, a provider may process data on our instructions or under its own legal responsibilities and privacy policy:

• Stripe — payment processing and fraud screening. Your payment details go to Stripe under its own terms and privacy policy.
• Resend — transactional email delivery when configured, such as purchase receipts. Rank-change notices are disabled.
• OpenAI — when enabled, automated safety checks of the proposed public text and website address described above. We do not send customer email addresses, IP addresses or payment details in these moderation requests.
• Vercel — website hosting, security and cookie-free aggregate web analytics, including the purchase-funnel events described above.
• Supabase — managed database storage.
• ImprovMX and Google Gmail — routing and handling support email.
• NumberBarn — the published support telephone service.

We update this page when the providers handling Site or support data change.

5. How long we keep things (retention)

• Brick content: while providing its display, subject to removal requests, our content rules and applicable retention obligations (see the Terms).
• Payment records and the consent record: for as long as tax, accounting, and dispute-defense obligations require — typically up to seven years after the transaction.
• Email address: for as long as needed to deliver purchase communications, resolve support requests, or meet the transaction-record obligations above. You may ask us to delete an address; we retain only records still needed for those purposes. Previously supplied addresses are not used for rank-change notices.
• Server logs: on the order of days to a few weeks, longer only if needed for an active security investigation.

6. Where the data lives

We operate from the United States and our providers process data there (and in their own regions under their own compliance programs). If you buy from outside the US, your data crosses a border to reach a pyramid that is, itself, an homage to a structure on a third continent. Our providers use recognized transfer mechanisms for such data where the law requires them.

7. Children

The Site is for adults and is not directed to children. We do not knowingly collect personal information from anyone under 13 (or the applicable higher minimum age where you live), and the Terms require buyers to be 18+. If you believe a child provided us information, contact us (Section 10) and we will delete it promptly.

8. Your rights, honestly sized

Depending on where you live (the EU/EEA, UK, California, and a growing list of states), you may have rights to access, correct, delete, or receive a copy of personal information, to object to or restrict certain processing, and to complain to your local supervisory authority. Our practice is simpler than the map: we extend the same courtesies to everyone, threshold or no threshold:

• Contact preferences. We do not send rank-change notices. Contact support about your email information or communication preferences; necessary payment and support messages may still be sent.
• Access or delete the personal data we hold (your email, your consent record where the law lets us release it, your brick inscription) by emailing us from the address on file or with proof of the checkout session — that matching is our verification, since we have no accounts and refuse to collect more data just to identify you for a deletion. We answer within the time your local law sets, and in no case slower than 45 days.
• Know that some things stay: transaction and consent records we must keep for tax, accounting, and dispute defense are retained even after a deletion request, and deleting your email does not un-lay a brick. Tributes are final and non-refundable (see the Terms); privacy rights are rights about data, not a side door in the monument.
• Brick removal: the brick is a purchase you made public on purpose, but if you want your name or decree blanked or your brick hidden, ask — we can strike the inscription while the stone stays. We do not restore struck inscriptions, and no refund attaches.

We do not discriminate against anyone for exercising a privacy right. The castes discriminate by tribute only, which is the product.

9. Security

We use reasonable technical and organizational measures scaled to the little we keep: payment credentials never touch our systems (Stripe holds those), admin doors are token-locked and fail closed, and data in transit is encrypted. No system is perfectly secure, and we cannot guarantee absolute security.

10. Contact

Privacy questions and rights requests go to support@pyramidiocy.com. For the rules of the monument, see the Terms of Service.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Effective” date above, and for material changes we will post a notice on the Site. Continued use of the Site after a change means you accept the updated Policy. The pyramid does not surprise people with paperwork; surprises are reserved for the sky.

Customer support: support@pyramidiocy.com · (844) 354-BRIX

Tiny bricks. Monumental achievements.