PRIVACY WITHOUT THE MYSTERY

What we keep and why.

Murphy's Million stores the name or handle you submit, the email connected to your payment, the payment platform, a payment reference, your Murphy Number and whether you chose to appear publicly.

Why it is stored

This information is used to verify support, prevent duplicate claims, issue a unique number and help you retrieve it later. Your email and payment reference are not displayed publicly.

After a verified claim, your email is also used to deliver your card and requested replacement copies. Delivery status, timestamps, resend counts and delivery errors are recorded to prevent abuse and help troubleshoot failed messages. Card emails are processed by our email delivery provider.

When a verified participant uses the card-sharing or caption-copy button, Murphy's Million records the type of action for basic campaign analytics. It does not receive the social platform, destination, post content or recipient.

Site and checkout analytics

We also use Metricool for basic public-page visit analytics. Its cookie-free tracker receives the page URL, browser window size and a referring URL when present; Metricool processes the visitor IP address to determine location. We limit this tracker to public pages with no query or only checked standard campaign tags. For tagged visits, all query values are removed from the page and referring URLs sent to Metricool. We skip links with other queries, sensitive-looking values, fragments or potentially private referring URLs. It does not run on admin, payment, claim or My Murphy pages, and honors Do Not Track and Global Privacy Control signals. This tracking does not identify paid participants.

We record visits, checkout starts, cancellations, payment confirmations, card downloads and sharing actions to understand where visitors encounter problems. These records use a browser-session identifier, page path, device category, referring site and campaign tags when available. Campaign tags and the referring site are retained with PayPal checkout records to report which links lead to completed payments. These tags stay with the checkout even if the browser closes. The most recent tagged link is remembered in your current browser tab while you navigate the site. Analytics event records do not contain your email, name, payment reference or payment card details. Verified card actions may include your Murphy Number.

My Murphy and invitations

My Murphy uses signed, HttpOnly session cookies lasting up to thirty minutes to keep your selected number and verified email access private. Email verification lets you see valid numbers connected to the same email across payment providers. Card links alone provide access only to that card.

When you follow a participant’s invitation link, its signed invitation code is remembered in the current browser tab for up to twenty-four hours. If you complete a verified claim, the inviter’s record ID is stored with the payment and participant record. The inviter sees only their total confirmed numbers, with no invitee names, emails or payment details. Invitations do not earn financial rewards.

Which Murphy are you?

Quiz answers are scored in your browser and are not sent to the server. Quiz start, completion and sharing actions may be recorded as anonymous session analytics, without the answers. A shared result link contains the personality result, without your name, email or participant record.

Payment information

Payments are processed by Ko-fi or PayPal. Murphy's Million does not receive or store your card or bank details.

Gifts and returning checkout

A gift payment records the buyer’s checkout details and optional note. The private claim link can be used by its holder to claim the gift. When claimed, the recipient supplies their own name, email and public-wall choice. The buyer’s checkout recovery does not reveal the recipient’s details or provide access to their dashboard. Keep gift links private until you send them to the intended recipient.

Returning checkout can use your selected name. Your full payment email is filled in only when your browser has matching verified email access. You review the details and approve each new payment.

Following the story and community votes

Your dashboard counts currently valid, issued numbers created after your joining record. We store first and recent dashboard visit times and a visit count for your selected number to understand whether holders return. Repeated activity within thirty minutes is treated as the same visit. A timestamp in your browser marks story updates that are new since your previous visit.

Community polls are free. An anonymous voting cookie and hashed network identifiers help limit repeat voting and abuse. Votes are stored with a poll and option, without a public voter list. Browsers and network identifiers cannot establish a unique real person.

Optional update emails

Episode and milestone updates require a separate, explicit subscription and email confirmation. Buying a number, choosing public-wall visibility or requesting a card email does not subscribe you. We record your chosen update types, consent and confirmation times, delivery status, unsubscribe requests and suppression information such as bounces or complaints.

You can change your preferences in My Murphy or use the unsubscribe link in an update email without signing in. Turning off update emails does not stop requested card delivery or email verification. Update emails are processed by the email delivery provider, and your email is never published in the story feed or poll results.

Public names

Your submitted name or handle is only eligible for public display when you select the public-wall option. You can hide your public name through My Murphy. Never submit a name you do not want associated with the project.

Questions or removal requests

Receipt-claim and retrieval verification codes are stored in hashed form, expire after ten minutes and can only be used once. For Ko-fi and old PayPal-link receipt claims, a code is sent only to the payment email recorded by the provider. Request and attempt limits are recorded to reduce abuse.

Email support@murphysmillion.com. Include the payment email or transaction ID so the correct record can be located.

Last updated: October 11, 2026.