Privacy Policy

Last reviewed 2026-08-07

This policy describes the personal information Dollar Fan Club (DFC) actually collects today, why we collect it, who processes it on our behalf, and how long we keep it. It covers fans, creators, giveaway entrants, and giveaway winners.

1. Information We Collect

Account information: your email address, username or handle, password credentials managed by our authentication provider, and the display name, bio, avatar or profile images you choose to upload.

Creator onboarding information: the profile and business details you submit to become a creator, including your creator profile content, payout onboarding status returned by Stripe, and — where you run a mail-in (no purchase) giveaway entry route — the mailing address you provide for entrants to use.

Subscription and payment information: subscription status, plan and price identifiers, subscription and customer identifiers issued by Stripe, payment and payout status, refund and dispute status. DFC does not collect or store full card numbers, bank account credentials, or the identity-verification (KYC) documents you provide to Stripe.

Giveaway information: the giveaways you create, your entries, entry method (subscriber entry or free mail-in entry), free-entry records including the details you submit on a mail-in entry, and, where a giveaway is open to Canadian residents, the skill-testing answer you submit. Skill-testing answers are stored in restricted server-side storage.

Winner and fulfillment information: winner claim records, the shipping or delivery details a winner provides so a prize can be fulfilled, delivery method and fulfillment status, and related correspondence needed to complete delivery.

Legal acceptance records: which agreement (for example Terms of Service, this Privacy Policy, Subscription Terms, Refund & Billing Policy, or creator agreements) you accepted, its version and content fingerprint, the time of acceptance, and — where captured for that record — the IP address and browser user agent present on the request.

Technical, security and operational data: IP address and user agent where they are captured as part of agreement acceptance records, abuse prevention, rate limiting, and operational or security logging. We do not maintain a general advertising or cross-site tracking profile of you.

2. How We Use Information

To operate your account: authentication, session management, profile display, creator onboarding, and account support.

To process payments: to create and manage subscriptions, creator payouts, refunds and disputes through Stripe.

To administer giveaways: to accept and validate entries, provide a free (no purchase necessary) entry route, verify eligibility, select winners, and administer winner claims and prize fulfillment.

To communicate with you: account, subscription, giveaway, winner and fulfillment notifications sent by email.

To keep the platform safe: content moderation of uploaded media, bot and abuse prevention, rate limiting, fraud detection, and investigating misuse.

To meet legal and compliance obligations: giveaway and sweepstakes recordkeeping, financial and tax records, agreement acceptance evidence, audit trails, and dispute resolution.

3. Fans, Creators, Entrants and Winners

Fans: we process account, subscription and entry information so you can subscribe to creators and take part in their giveaways.

Creators: we process additional onboarding, payout status and giveaway administration information so you can be paid through Stripe and run compliant giveaways.

Entrants and winners: creators receive the information they reasonably need to administer their own giveaway, including entry counts and — once a prize is claimed — the fulfillment details required to deliver the prize. Winner contact and shipping details are shared with the creator running that giveaway for fulfillment purposes only.

4. Service Providers We Use

Supabase — authentication, database and file storage hosting for the platform.

Stripe — payment processing, subscription billing, creator payouts through Stripe Connect, refunds, disputes, and identity verification of creators. Stripe handles card, bank and identity-verification data directly under its own privacy policy.

Resend — delivery of transactional email such as account, subscription, giveaway and winner notifications.

Cloudflare Turnstile — bot and abuse prevention on submission forms.

Media moderation providers — server-side automated review of uploaded images. A client-side check (NSFWJS) also runs in your browser purely as a user-experience aid; it is not the authoritative moderation step and does not send your image to a third party.

We do not sell your personal information, and we do not share it with advertisers or advertising networks. We may disclose information where required by law, to enforce our terms, or in connection with a legal claim.

5. Data Security

We use encryption in transit, managed authentication, row-level database access rules, and role-based access controls that restrict who can read your data. Sensitive giveaway records such as skill-testing answers and winner fulfillment details are readable only through restricted server-side access paths.

6. Data Retention

We retain personal information for as long as reasonably necessary to operate the service, meet legal and compliance obligations, maintain financial and payment records, administer giveaways and prize fulfillment, prevent fraud and abuse, and resolve disputes.

DFC does not currently run an automated schedule that deletes data at a fixed interval, and we do not publish fixed retention periods. Some records — including payment and payout records, giveaway administration and winner records, legal acceptance records, and security or audit logs — may be retained after an account is closed where that is legally or operationally necessary.

7. Account Closure

You may close your account at any time from your account settings. Closing an account deactivates access, ends active subscription billing through Stripe, and removes your public profile and content from public discovery.

Closing an account is not a full erasure of every record. Records we are required or operationally obliged to keep — such as payment history, giveaway and winner administration records, legal acceptance records, and security logs — are retained as described in the Data Retention section above.

8. Your Rights

You may request access to, correction of, or deletion of your personal information, or ask us about how it is used, by contacting us at privacy@joindollarfanclub.com. You may also close your account at any time.

Depending on where you live, you may have additional privacy rights under applicable law, such as the right to portability, to object to or restrict certain processing, or to complain to a supervisory authority. We honour the rights that apply to you under the law of your jurisdiction; this policy does not grant rights beyond applicable law. Some requests may be limited where we are required to keep a record.

9. Cookies

We use essential cookies and local browser storage for authentication and session management. No third-party advertising or cross-site tracking cookies are used.

10. Changes to This Policy

Each published version of this policy is recorded with its own version identifier and content fingerprint. When we make a material change we publish a new version rather than altering a previously published one, and the version in force at the time of your acceptance is the version recorded against your account.