Last updated: October 2026. Edit the [bracketed] details before going live.
We collect as little as possible.
You can verify with Google Sign-In or with a one-time code sent to your email. With Google, Google tells us your Gmail address and display name, and we never see your Google password. With a code, you give us your email address and we email you a 6-digit code that expires in 10 minutes; until it is used or expires we keep only a scrambled (hashed) copy of it. We use your email address only to recognise you and attach the Super VVIP badge. Sign-in emails are sent through [your email service provider, e.g. Brevo], which handles the message for us. We keep a login cookie on your device for up to 7 days; you can sign out any time.
Bitcoin, USDT and USDC transactions are public on their blockchains. USDT and USDC payments made through the checkout are handled by NOWPayments, which receives your payment details and handles them under its own privacy policy. For every crypto payment we also read public blockchains, through third-party node providers, to confirm the payment; we store the transaction ID and amount. We store your verified email address, the invoice amount, the transaction ID and the time, for accounting and to give you your badge.
Your settings and badge status are also kept in your browser (localStorage). We do not run advertising or tracking cookies.
Our web server keeps standard logs (IP address, time, page) for security and fixing problems, and deletes them after about 30 days.
To see or delete the data we hold about you, use the contact page.