Privacy Policy

1. Information We Collect

We collect the following categories of information directly from you or automatically as you use the Service:

• Email address — when you subscribe, sign up for the newsletter, or contact us.
• Payment information — processed by Stripe. We do not store full card numbers; we receive only the customer ID, last four digits, card brand, expiration, and billing country.
• Discord user ID — when you link your Discord account to receive subscriber role provisioning.
• IP address and user agent — recorded on signup, login, and key account actions for fraud prevention and abuse detection.
• Communications with us — if you email us, your message and our response are retained for support and audit purposes.

We do not knowingly collect Social Security numbers, government IDs, precise geolocation, or biometric information. We do not sell personal information.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and bill for the subscription Service.
• Provision and remove your Discord role as your subscription status changes.
• Send transactional email (receipts, renewal notices, password resets) and, if you opted in, newsletter content.
• Detect, prevent, and investigate fraud, chargeback abuse, and violations of our Terms of Service.
• Respond to your support requests, legal demands, and data-subject requests.
• Improve the Service through aggregated, non-identifying analytics.

We do not use your information to train machine-learning models for any purpose other than fraud and abuse detection.

3. Third-Party Services

We rely on a small number of third-party service providers, each of which receives only the information necessary to perform their function. Each provider has its own privacy policy that governs its handling of your data.

• Stripe, Inc. — payment processing, subscription management, customer portal.
• SendGrid (Twilio) — transactional and newsletter email delivery.
• Discord, Inc. — community hosting and subscriber role assignment.
• Vercel, Inc. — website hosting, edge functions, request logging.

We may also disclose information when required by law, in response to valid legal process, or to protect the rights, safety, or property of Ball Street, our users, or the public.

4. Cookies and Similar Technologies

We use a small number of strictly necessary cookies and local-storage entries to keep you logged in, remember your age confirmation, and protect against cross-site request forgery. We do not use third-party advertising cookies.

We may add a privacy-friendly analytics tool in the future to understand aggregate traffic patterns. If we do, we will update this Policy and, where required, request your consent before any non-essential tracking begins.

5. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. California residents have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect and the right to opt out of any sale of personal information (we do not sell personal information).

To exercise any of these rights, email legal@ballstreet.money. We will verify your identity using the email associated with your account and respond within thirty (30) days. For deletion requests, our process — cancelling your subscription, deleting your Stripe customer record, and removing you from the SendGrid suppression list — is documented in our internal runbook and tracked under our compliance ticket.

We will not retaliate against you for exercising any of these rights.

6. Data Retention

We retain your information for as long as you have an active subscription or account, and for a period afterward as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Subscription and payment records are retained for seven (7) years to satisfy tax and accounting obligations.
• Email logs and support tickets are retained for two (2) years.
• IP address and user-agent logs are retained for ninety (90) days for fraud and abuse investigation, then deleted or aggregated.
• Newsletter subscribers who unsubscribe are kept on a suppression list to honor the unsubscribe request.

When you request deletion, we delete or anonymize records that are not subject to a legal retention obligation.

7. Children

The Service is intended only for adults aged 21 or older. We do not knowingly collect personal information from anyone under the age of 21. If we learn that we have collected such information, we will delete it promptly. If you believe that a person under 21 may have provided us with personal information, please contact us at legal@ballstreet.money.

8. Security

We use industry-standard practices to protect your information, including TLS encryption in transit, encrypted storage at rest through our service providers, and limiting employee access to information on a need-to-know basis. No system can be guaranteed secure; if you believe your account has been compromised, please contact us immediately.

9. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy on this page and update the “Last updated” date. If we make material changes, we will notify you by email or through the Service. Continued use of the Service after a change constitutes acceptance of the updated Policy.

10. Contact

Questions, requests, or complaints about this Policy can be sent to legal@ballstreet.money. If we have not resolved a complaint to your satisfaction, you may have the right to lodge a complaint with your local data protection authority.