Privacy Policy

Information we collect

• Discord account data via OAuth — your Discord user id, username, avatar, email, and, for Sellers, the servers you administer.
• Seller billing data — identifiers for your connected Stripe account and your flatpass platform subscription. We do not store card numbers; Stripe handles payment details.
• Membership records — which roles a Member has purchased, subscription status, and the events (subscribe, cancel, refund, dispute) needed to grant or revoke access.
• Usage data — basic logs and diagnostics generated when you use the Service.

How we use your information

We use this information to operate the Service: authenticating you, provisioning Seller invite pages, processing platform subscriptions, granting and revoking Discord roles as subscriptions change, providing support, and keeping the Service secure.

How we share information

We share information only with the providers needed to run the Service:

• Stripe — payments, Connect onboarding, and platform billing.
• Discord — authentication and granting/revoking roles on your behalf.
• Hosting and database providers that store and serve the Service’s data.

We do not sell your personal information. We may disclose information if required by law or to protect the Service and its users.

Sellers and their Members

Sellers are the merchant of record and control their own customer relationships. Information about a Member’s purchase is available to the Seller they purchased from. Each Seller is responsible for how it handles its Members’ information.

Cookies and sessions

We use a session cookie to keep you signed in. It is required for the Service to function and is not used for third-party advertising.

Analytics

We count visits to Seller invite pages so Sellers can see how many people viewed their page and how many joined. Each visit is recorded with a coarse device type, whether the page was opened inside an app’s built-in browser, and any campaign tag the Seller added to their own link. We do not store visitors’ IP addresses, and we do not record your browser’s user-agent string.

To recognise a returning visitor we set one first-party cookie holding a random identifier. It contains nothing about you, it is never shared with anyone, and it is not used to follow you to other websites. Before that identifier is stored it is converted into a different value for each Seller, so visits to one Seller’s page cannot be connected to visits to another’s. That separation is built into how the data is stored, not a promise about how we query it.

If you sign in with Discord to subscribe, the earlier visits recorded on that same browser, for that same Seller, are linked to your Discord account. This is what lets a Seller see which of their links first brought a member in, rather than only the last page that member happened to open. Those visits are reported to Sellers only in aggregate — counts per link, per device, per day — never as an individual browsing history. The link is limited to the browser you signed in on and does not reach across your devices.

Visit records are deleted after 30 days, and the cookie expires on the same schedule. Clearing your browser’s cookies removes the identifier immediately, after which you are counted as a new visitor.

On our own marketing pages we use a self-hosted, cookieless analytics tool to see which pages people find useful. It runs on our infrastructure and shares nothing with third-party advertisers.

Data retention

We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information. To make a request, contact us using the details below.

Security

We take reasonable measures to protect your information, but no method of transmission or storage is completely secure. Keep your Discord and Stripe credentials safe.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Contact

Questions about your privacy? Email support@flatpass.io.