Privacy Policy

1. Information you give us directly

• Account info — email, password (stored hashed by Supabase Auth), and the username + display name you choose.
• Profile content — your bio, photos / GIFs, accent color, the URLs and titles of links you add, and any creator preferences you set in the dashboard.
• Tip messages — if a fan attaches a name or note to their tip, we store it so you can read it.

2. Information we collect automatically

• Click events on links from your profile — referrer URL, source query parameter (if you use one), and the user-agent string. We do not store visitor IP addresses.
• Aggregated counts per link so analytics show top performers.
• Cookies — only the auth-session cookies set by Supabase. No third-party trackers, no advertising cookies.

3. Information processed by partners

• Stripeprocesses tips and subscriptions. Stripe handles payment-card data directly under PCI-DSS — we never see card numbers. For tips we use Stripe Connect (direct charges) so funds settle in the creator's own Stripe account; we retain only the Stripe session id, the amount, the creator the tip was for, and the supporter's name + message if they provided one. For paid plans Stripe stores billing addresses and last-four digits for receipts.
• Supabase hosts our database and file storage in the EU/US.
• Vercel hosts and serves the Service.

4. How we use your information

• To provide the Service (render your profile page, route clicks, accept tips).
• To send transactional email — email confirmations, password resets, tip-received notifications.
• To enforce our Terms — abuse handling, fraud prevention, complying with legal requests.
• To compute the analytics shown on your dashboard.

We do not sell your personal data, do not serve third-party advertising, and do not use your data to train AI models.

5. Sharing

We share data only when one of these applies:

• You publish it. Your profile, bio, photo, and links are public by design.
• Service providers acting on our behalf (listed in section 3) under contractual data-processing terms.
• Legal compliance when we receive a valid request from law enforcement or a court order.

6. Your rights (EU / UK / California)

• Access — request a copy of the data we hold about you.
• Correction — change anything wrong via your dashboard, or email us.
• Deletion — delete your account from your Profile page; this purges your data subject to legal retention windows for tips/payments.
• Portability — export your account data as JSON from the Profile page.
• Object / restrict — write to support@mintfan.ai.

7. Retention

Profile and link data is kept until you delete your account. Tip records are kept for up to 7 years to satisfy financial-record retention requirements. Click-event metadata is kept for 18 months then aggregated.

8. Children

The Service is not directed at children under 18 and we do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will remove it.

9. Contact

Questions, data requests, or a complaint: support@mintfan.ai. EU residents may also contact their local data protection authority.