Privacy Policy

Privacy Policy

Effective date: 1 May 2026

Data we collect

  • Email address (for account authentication)
  • Payment data (processed by Stripe; we never store full card details)
  • Country of residence (optional, displayed publicly if provided)
  • Display name (optional)
  • User-generated content you submit (Confessions, Pacts, Last Words, Question Responses) along with internal user_id linkage
  • Activity data (clicks, purchases, streak counts) for statistical aggregation

Why we collect it

  • Account authentication and access control
  • Payment processing
  • Public statistical aggregation on the /transparency page
  • Moderation, abuse prevention, and legal compliance

Retention

Personal data is deleted after 12 months of inactivity, except where a legal obligation requires longer retention. Aggregated statistics may be retained indefinitely in anonymized form.

Your rights

You have the right to access, rectify, delete, and port your data. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC). Contact us at thebuttondies@gmail.com to exercise any of these rights.

Sub-processors

  • Supabase — database & authentication (US/EU regions)
  • Stripe — payment processing (Ireland for EU customers, US for others)
  • Resend — transactional email delivery (US)

Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies.

Contact

For privacy inquiries: thebuttondies@gmail.com