Terms of Use

1. What this is

One Million Humans ("the Site", "we", "us") is a collaborative online mosaic operated from Ireland. By using the Site, you agree to these terms. If you do not agree, do not use the Site.

Data Controller: One Million Humans, Ireland. For data-related enquiries, contact onemillionhumansme@gmail.com.

2. Eligibility

You must be at least 16 years of age to use the Site or claim a tile, in accordance with the Irish Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). By claiming a tile, you confirm that you meet this age requirement.

3. Claiming a tile

Each tile is permanently assigned to one person. By claiming a tile you confirm that: (a) the photo you upload is of you or you have the right to use it, (b) the content you provide is accurate, (c) you meet the age requirement in Section 2, and (d) you have read and agree to these Terms of Use and our data processing practices described in Sections 10 and 11.

4. Premium upgrade

The premium upgrade ($2.99, one-time) allows you to add a clickable link to your tile and update your photo and link at any time. Payment is processed securely by Stripe — we never see or store your card details. Stripe processes your payment data under its own privacy policy at stripe.com/privacy.

Under the EU Consumer Rights Directive, you have a 14-day right of withdrawal from digital purchases. By claiming a premium upgrade, you acknowledge that the digital content is delivered immediately upon purchase and you expressly consent to waive your 14-day right of withdrawal. Premium purchases are therefore non-refundable once the upgrade has been applied to your tile.

5. Content rules

All uploaded images are automatically screened for inappropriate content using multiple layers of automated moderation. All submissions are subject to manual review before appearing on the mosaic. We reserve the right to remove any tile, image, or link at our sole discretion, including but not limited to content that is:

• Pornographic, sexually explicit, or depicting nudity or partial nudity
• Violent, graphic, gory, or depicting harm
• Hateful, discriminatory, or promoting hate groups
• Depicting illegal drugs, weapons, or paraphernalia
• Spam, scams, phishing, or malware
• Impersonating another person
• Infringing on intellectual property rights
• Otherwise illegal, harmful, or inappropriate for a general audience

6. Illegal content and law enforcement

Uploading illegal content of any kind is strictly prohibited. This includes, but is not limited to, child sexual abuse material (CSAM), non-consensual intimate imagery, terrorist content, and any material that is illegal under the laws of Ireland or the European Union.

All uploaded images are subject to automated content screening before and during review. We maintain server logs, including IP addresses, timestamps, and email addresses associated with every submission.

Where we identify or reasonably suspect illegal content, we will immediately report it to the relevant law enforcement authorities, including An Garda Síochána and any other applicable agencies, and will provide all associated user data and evidence to assist their investigation. We may do so without prior notice to the user.

Rejected images are permanently deleted from our systems immediately upon rejection, except where we are required to preserve evidence for law enforcement or legal proceedings, in which case data will be retained only for as long as necessary and handled in accordance with applicable law.

7. Notice and action — reporting content

In accordance with the EU Digital Services Act (DSA), any person may report content on the Site that they consider to be illegal or in violation of these terms. To submit a report, email onemillionhumansme@gmail.com with:

• A description of the content and why you believe it is illegal or violates these terms
• The tile number or location on the mosaic, if known
• Your contact details

We will acknowledge receipt of your report and act on it without undue delay. You will be notified of the outcome of your report and have the right to appeal our decision by emailing us within 14 days.

8. Tile removal

We may remove or modify any tile at any time for violation of these terms or for any other reason. Removal of a tile does not entitle you to a refund of any premium purchase (see Section 4). If you want your own tile removed, contact us at onemillionhumansme@gmail.com and we will remove it within 30 days.

9. Links

Premium users may add a link to their tile. You are solely responsible for the content of any linked page. We do not endorse or verify linked content. We may remove any link that violates these terms or that we consider harmful, misleading, or inappropriate.

10. Your data and privacy

What we collect: When you claim a tile, we collect your name, email address, location (optional), photo, and your IP address. Your email and IP address are never displayed publicly.

Legal basis for processing: We process your personal data on the basis of your explicit consent, which you provide by ticking the consent checkbox and agreeing to these terms when claiming a tile. For security logging (IP addresses, rate limiting) and legal compliance, we also rely on our legitimate interests in preventing abuse and complying with applicable law. You may withdraw consent at any time by requesting tile removal (see Section 8), though this does not affect the lawfulness of processing carried out prior to withdrawal.

How we use your data: Your name, photo, and location are displayed publicly on the mosaic. Your email is used for magic link authentication and to contact you about your tile if needed. Your IP address is logged for rate limiting, security, and legal compliance purposes.

Third-party processors: Your data is processed and stored by the following third-party service providers, each of which operates under its own privacy policy and data processing terms:

• Supabase (database and image storage) — USA — privacy policy
• Vercel (hosting and server infrastructure) — USA — privacy policy
• OpenAI (automated image content moderation) — USA — privacy policy
• Stripe (payment processing, premium users only) — USA — privacy policy
• Google (anonymised site usage analytics via GA4) — USA — privacy policy

International data transfers: Your data is transferred to and processed in the United States by the providers listed above. These transfers are carried out in reliance on the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) as adopted by the European Commission.

Image moderation: Uploaded images are analysed by automated moderation systems, including OpenAI, for content safety screening. Images that fail moderation are never stored and exist only temporarily in server memory. Images sent to OpenAI for moderation may be retained by OpenAI for up to 30 days under their abuse monitoring policy. Approved images are stored in our database; rejected images are permanently deleted (subject to the law enforcement exception in Section 6).

Data retention: Your tile data (name, photo, location) is retained for as long as the Site is operational. Email addresses and IP logs are retained for as long as necessary for security and legal compliance purposes, and no longer than 24 months from your last interaction with the Site. If you request tile removal, your personal data will be deleted within 30 days.

We do not sell your data to third parties.

11. Your rights under GDPR

Under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate personal data.
• Right to erasure: You may request deletion of your personal data ("right to be forgotten"). We will action such requests within 30 days. Upon erasure, any licence granted to us under Section 15 shall also terminate and your content will be removed from the mosaic.
• Right to restrict processing: You may request that we limit how we use your data.
• Right to data portability: You may request your data in a structured, commonly used format.
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: You may withdraw your consent at any time by requesting tile removal.
• Right not to be subject to automated decisions: Our content moderation uses automated decision-making to screen uploaded images. If your image is rejected by automated moderation, you have the right to request human review of that decision by emailing us.

To exercise any of these rights, email us at onemillionhumansme@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie if you believe your data protection rights have been violated.

12. Cookies and analytics

The Site uses cookies for the following purposes:

• Strictly necessary cookies: Required for the Site to function (e.g., authentication sessions). These do not require consent.
• Analytics cookies: Google Analytics (GA4) collects anonymised usage data such as page views, session duration, and approximate geographic location. These cookies are only set with your explicit consent.

When you first visit the Site, you will be asked to accept or decline analytics cookies. You can change your preference at any time by clearing your browser cookies and revisiting the Site. We do not use cookies for advertising or tracking across other websites.

For more information about how Google processes analytics data, see Google's partner site policy.

13. Availability

We aim to keep the Site available indefinitely but make no guarantees of uptime or permanence. We are not liable for any loss resulting from the Site being unavailable or discontinued.

14. Limitation of liability

The Site is provided "as is" without warranties of any kind. To the fullest extent permitted by law, we shall not be liable for any indirect, incidental, or consequential damages arising from your use of the Site. Nothing in these terms excludes or limits our liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be excluded by Irish or EU law.

15. Intellectual property

By uploading a photo or any other content to the Site, you grant One Million Humans a worldwide, non-exclusive, royalty-free licence to display, store, reproduce, and distribute that content as part of the mosaic and in any promotional material for the Site. You retain all ownership of your original content. This licence terminates if you exercise your right to erasure under Section 11 and your content will be removed from the mosaic and any promotional materials within 30 days.

16. Indemnification

You agree to indemnify, defend, and hold harmless One Million Humans, its officers, employees, and agents from and against any claims, damages, losses, liabilities, costs, or expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Site, (b) any content you upload or link to, (c) your violation of these terms, or (d) your violation of any rights of a third party.

17. Severability

If any provision of these terms is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable.

18. Governing law

These terms are governed by and construed in accordance with the laws of Ireland. Any disputes arising from or relating to these terms or the Site shall be subject to the exclusive jurisdiction of the courts of Ireland. If you are a consumer in the EU, you also retain the benefit of any mandatory protections provided by the laws of your country of residence.

19. Changes

We may update these terms at any time. Continued use of the Site after changes constitutes acceptance. Material changes will be noted by updating the date at the top of this page. Where material changes affect your rights or how we process your data, we will make reasonable efforts to notify affected users by email.

Contact

For any questions about these terms, data subject access requests, or to report content, email us at onemillionhumansme@gmail.com.