Privacy

What The Pillar is

The Pillar is a browser game and an advertising marketplace: One Floor Each, a tower people build together one floor each, and a 3D open-world city. A window is a licensed ad pane on its 80-floor tower, not real property and not a security.

This page is a plain-language summary for players and advertisers. It is not legal advice, and a window on The Pillar is not real estate and not an investment.

What we collect

When you sign in we receive your public profile from X: your handle or name, avatar, and an account identifier. We store this to show who lit a window and to run the lobby chat.

We store the chat messages you post and the windows you light. We keep basic cookies for your sign-in session.

If you lease a window without X, we store the email address you pay with (from Stripe) to tie the window to you and to send you sign-in links and lease emails.

If you pay with USDC through x402, we store the paying wallet address and the payment's transaction, both already public on the blockchain.

If you buy Bricks or Pillar Plus, we keep a record of each purchase and of each time you spend Bricks (what, when and how many) to run your account and answer questions. Card details go to Stripe and never reach us. We also store that you confirmed you are 18 or older before your first purchase, and when.

For One Floor Each's season we count what you do in the tower (knocks, notes, gifts, visits, cheers) to give you points. Your Crown bids, cheers and duels are kept to run them. The boards show your name or handle next to your knocks, cheers, gifts and duel wins unless you hide from them in the boards panel.

If you turn on alerts, we store the push address your browser gives us and your time zone, to tell you about your bids, duels and blocks, never between midnight and 6 AM your time. If you signed in with email or Google, we can also email you about outbids, Crown wins and duel results; every such email has a link to turn them off. If a card payment is disputed, we may hold the account's Bricks while we look into it.

If you buy a brand floor, we keep the brand's name, link, line, colors and email, and the result of the content check, to build the floor and run the plan.

We check every new ad: its name, text, link and picture, and the text of the linked page, go to Anthropic for an automatic review, and the link goes to Google Web Risk, a list of unsafe sites. We keep a record of each check with a one-way hash of the buyer's IP address, never the address itself.

Analytics

We use Google Analytics 4 to understand how the site is used (pages viewed, rough location, device). Google Analytics sets its own cookies and processes this data on Google's servers. We also use Cloudflare, which sits in front of the site for security and performance and sets a small analytics beacon.

This is basic usage measurement, not advertising tracking. We do not run ad-network trackers that follow you across other websites, and we do not sell your personal data.

Processors

The app and its database run on Railway. Payments are handled by Stripe. Payments in USDC through x402 are checked and settled by Coinbase (its x402 facilitator), which also screens paying wallets. Sign-in is handled by X, or by one-time email links sent through Resend, which also sends our lease emails. New ads are checked with Anthropic (an automatic review) and Google Web Risk (link safety). Analytics is handled by Google (Analytics) and Cloudflare. These providers process data on our behalf.

We do not sell your personal data.

Your choices

You can stop using the app at any time. To request deletion of your account data, email contact@extensionsmarket.com and we will delete it within 30 days.

This page is a plain-language summary of what we collect and why. It is not legal advice.