privacypolicy

This policy applies to onebilly.lol, our APIs, and software agents that buy or inspect the world. Payments are handled by Stripe under Stripe’s privacy policy. Sign-in with Google, GitHub, or Apple is handled by those providers; we only receive the account identifiers they send us (typically email).

Account. Email address is the identity. Optional OAuth links (Google, GitHub, Apple) store a provider user id so you can sign in again. Optional Stripe customer id so later purchases attach to the same person.

Purchases. Which cells you bought, their color, the stamp used to place them, and payment status. We do not collect a display name or personal URL at checkout. Placed voxels are public — that is the product.

Email we send you. Magic-link sign-in and claim links, from hello@onebilly.lol. Custom-build requests go to lol@onebilly.lol.

Requests. If you submit a custom-build form while signed in: who you are, how to reach you, and what you want built.

Technical. Session cookies, IP-based rate limits, and product analytics (PostHog plus Vercel Analytics / Speed Insights) so we can see what broke and what people used. We do not sell this.

Signed-in sessions live in HTTP-only cookies (Auth.js and, for magic links, a OneBilly session cookie). They are how we know it is you. Stripe checkout runs on Stripe’s site and sets its own cookies there.

We use Neon (database), Vercel (hosting), Stripe (payments), Resend (transactional email), PostHog (product analytics), and — only if a generation or extra content-review pass is turned on — an LLM provider to turn a sculpture description into parameters or to double-check wall text. Those vendors see only what they need to run that job.

Occupied cells, their colors, and the fact of a placement are visible to anyone exploring the cube. Do not put secrets in wall text or images. Catalog labels we store on a collection are ours (kind of stamp), not a personal bio.

Voxels are meant to stay. If you delete your account we anonymize the email, drop OAuth links, and detach ownership; the pixels remain in the world without your mailbox attached. Payment records remain with Stripe as required for taxes and disputes. Inquiry emails stay in the operator inbox until we delete them.

Signed-in accounts can delete from /account. You can also email us.

OneBilly is not directed at children under 13. Do not create an account if you are under 13.

Material changes will be posted here with a new date. Continued use after that date is acceptance of the update.

Privacy questions, deletion, and takedowns: lol@onebilly.lol. Also see the terms of service.