Last updated 16 August 2026 · operated by OMMZA
The short version. We ask for as little as possible: an email and a username if you want an account, and nothing at all if you don't. We never see your card details. We don't run advertising trackers or analytics cookies. But anything you publish on a slot is public and permanent by design — that is the product, so please read the section on that before you post.
ONE MILLION MESSAGES is operated by OMMZA ("we", "us"). If you have any question about this policy or your data, contact us at privacy@ommza.com and we will respond within 30 days.
| What | Why | Kept for |
|---|---|---|
| Email address | To identify your account and let you sign back in | Until you delete your account |
| Username (handle) | Shown publicly next to slots you buy | Until you delete your account |
| Password | To sign you in. Stored only as a scrypt hash — we cannot read it, and we could not tell you your password if you asked | Until you delete your account |
| Your messages, links and slot numbers | This is the product. Published publicly | Permanent — see below |
| Reactions and favourites | Reaction totals are public; your favourites list is private to you | Until you delete your account |
| Order records | To deliver the slots you paid for, and for accounting and tax | As long as tax law requires |
| IP address | Rate limiting and counting views without counting the same person twice | Held in memory only, for up to one hour. Never written to our database |
You can buy a slot without registering. If you do, we do not store an email or a username against it, and the slot is shown as anonymous. Your browser keeps a private claim code in local storage so you can attach that slot to an account later if you choose. That code never leaves your device until you use it.
This is the most important thing on this page. When you buy a slot, the message, any link you attach, the slot number and the username on it are published publicly and are intended to stay published permanently. They can be read by anyone, and may be copied, screenshotted, cached by search engines, or shared elsewhere beyond our control.
Because of that, deleting your account does not automatically erase slots you have already bought — permanence is what buyers are paying for, and removing a slot would break the numbering that others paid for. If you delete your account, we remove your email, password and favourites, and detach your username so the slot reads as anonymous. If you need the content itself taken down, contact us and we will consider it case by case, including where the law requires removal.
Please do not put anything on a slot that you would not want public forever — no personal details, no contact information, nothing about another person who has not agreed to it. Our screening blocks phone numbers, email addresses and street addresses before payment, but it is not perfect and it is not a substitute for your own judgement.
Payments are processed by Stripe. We use Stripe's own hosted checkout page, which means your card number never touches our servers — we never see it, receive it or store it. We store only a Stripe reference for your order, the amount, and what you bought.
Stripe processes your payment details as its own controller under Stripe's privacy policy. If you are signed in, we pass your email to Stripe so it can send you a receipt.
We use exactly one cookie: a session cookie called sid, set only when you
sign in. It holds a signed reference to your account, is marked HttpOnly and
SameSite=Lax, is sent only over HTTPS in production, and expires after 30
days. It is strictly necessary to keep you signed in.
We run no analytics, advertising or tracking cookies, and we do not sell or share your data with data brokers.
We also use your browser's local storage to remember your board display preferences and any anonymous claim codes. That data stays on your device and is never sent to us except when you redeem a claim code.
We do not sell your personal data, and we never have.
Depending on where you live, you may have the right to access, correct, export, delete or restrict the processing of your personal data, and to object to it. To exercise any of these, email privacy@ommza.com.
Please read the section on permanence above first, because it limits what deletion can achieve for content you have already published. If you are in the UK or EU and you are unhappy with our response, you have the right to complain to your local data protection authority.
This site is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Passwords are stored only as salted scrypt hashes. Sessions use signed, HTTP-only cookies. Traffic is served over HTTPS. No system is perfectly secure, but we do not store card data at all, which removes the most sensitive category entirely.
If we change this policy we will update the date at the top of this page. If the change is significant, we will say so on the site.
← Back to the stage