Policies
Privacy
What we keep, what we don't, and why.
Plain-language draft, pending legal review.
What we never store
Your IP address. Your email, with three optional exceptions you choose yourself: a recovery email, kept only as a keyed fingerprint we can compare against but can't read back; a notifications email, kept as you type it, used only to email you when a creator you subscribe to goes live or posts, off until you turn it on and removable at any time; and a reply address on a support request, deleted 14 days after it's resolved. Your swaps. Any ID document, photo or date of birth from the age check: we keep only that you passed.
What we store
Your username, your purchases and subscriptions (so we can give you access), and an encrypted copy of your wallet that only your passkey, recovery words or password can open.
Transaction hashes are deleted 30 days after a payment. Refund addresses are deleted 30 days after a case closes.
What's public anyway
Payments are transactions on Base, a public ledger. Anyone can see the paying wallet, the creator's wallet, the amount and the time. See "Your payments are public" in Learn.
Scripts and trackers
None from third parties on this site's sign-in, sign-up or wallet pages, ever. Elsewhere we list every third-party script we use, with its purpose, in our design register. Today that list is empty.