Privacy Policy · Profilejar

The short version

Profilejar is run by [Company legal name], a [State] company ("Profilejar", "we" or "us"). This policy covers profilejar.com, the pages people make on it, and the tips and purchases made through those pages.

We keep your email and a one-way hash of your password. We never store the password itself.
Anything you put on your page is public once you publish it.
We count views and taps without keeping anyone's IP address.
Stripe handles every payment. We never see a full card number.
We use only the cookies needed to keep you logged in. No ad or tracking cookies.
We don't sell your data, and we don't use third-party analytics.

If you have a page

When you make a page and an account, we collect:

Your account

Email address. Used to log in and to reach you about your account.
Password. We keep only a one-way hash of it, made with a slow, salted method. Nobody at Profilejar can see your password.
Account dates. When you signed up and when you last logged in.

Your page

What you put on it: your name, a line of text, your links, the tip amounts you pick, and anything you offer for sale.
Your address on Profilejar, like profilejar.com/yourname.
Drafts. We save your page as you work on it, so it's still there after a reload. This happens before you publish, and before you make an account.

Once you publish, everything on your page is public. Anyone with the link can see it, and search engines may show it.

Your photos

When you add a photo, we store it on our servers as a full-size copy and a small copy.
A photo on a published page is public. Anyone who has a photo's link can open it.
Photo files can carry details your phone added, like where the photo was taken. If you'd rather not share that, turn it off in your phone's camera settings before you upload.

Getting paid

Payouts run through Stripe. When you set up payouts, you give your identity and bank details to Stripe directly. We don't receive or store them.
We keep your Stripe account ID and whether your account is ready to take payments. We check with Stripe whether your details are complete and whether payouts are on.
For each tip or purchase on your page, we keep the amount, the service fee, the status, the time and Stripe's payment ID. We don't keep who paid.

When you ask for help

If you ask us for help logging in, we keep the email you give us and any note you add.
To help you, our support team can open your account or page. Every time they do, it's recorded in a log that only our team can see.

If you visit or pay

You don't need an account to visit a page or to tip. Here's what we keep when you do.

View and tap counts

We count how many times each page is viewed each day, and how many times each link is tapped.
To count unique visitors, we make a one-way hash from a random daily code, your IP address and your browser type. We delete the daily code after about two days, so the hash can't be traced back to you. We never store your IP address.
We record the site that sent you, by its name only (like instagram.com), and not the full web address.
Counts are totals per page per day. They don't say who you are, and we don't follow you to other sites.
We don't use any third-party analytics.

Tips and purchases

Payments are handled by Stripe, including Apple Pay, which works through Stripe. Your card details go straight to Stripe and Apple. We never see your full card number.
We keep the amount, the fee, the status, the time and Stripe's payment ID, so we can confirm the payment and show the page owner their totals.
Stripe uses your payment details as its own privacy policy describes, including to prevent fraud.

Subscribing to a page

If you subscribe to someone's page, we keep your name, your email and the date, and show them to that page's owner, so they can stay in touch with you.
The page's owner can see their list, download it and remove anyone from it. To come off a list, ask the page's owner or contact us.
We don't email you when you subscribe, and we don't use your email for anything else.

Contacting us

If you write to us through our contact form, we keep what you send, like your name, email, organization and message, so we can reply.

Cookies

We use only the cookies Profilejar needs to work. We don't use advertising cookies or tracking cookies.

pj_s: Keeps you logged in. It lasts 30 days, or until you log out. We store only a hash of it.
pj_edit: Lets you come back to a page you started before making an account. It's cleared when you log in or log out.

Neither cookie can be read by scripts on the page, and neither is shared with anyone else. When you tip, Stripe's payment form may set its own cookies to spot fraud. Those are covered by Stripe's privacy policy.

How we use it

To run your account and show your page.
To process tips and purchases, and send money to the right person through Stripe.
To show page owners their views, taps and totals.
To answer you when you ask for help or write to us.
To keep Profilejar safe, including limiting repeated log-in tries and stopping fraud and abuse.
To follow the law, including tax and accounting rules.

We don't use your data to show you ads, and we don't build profiles of visitors.

We don't sell it

We don't sell your personal information. We don't share it with anyone for advertising, and we don't trade it for anything of value.

How long we keep it

Your account and page: for as long as your account is open.
Deleted accounts: when an account is deleted, it can be restored for 30 days. After that, the account, its page, its counts and its list of subscribers are removed.
Subscribers: a subscriber stays on a page's list until the owner removes them, or the page is deleted for good.
The daily code used for visitor counts: about two days.
View and tap counts: for as long as the page exists.
Payment records: as long as tax and accounting law requires.
Help requests and contact messages: as long as we need them to help you.
Our team's activity log: kept to protect accounts and to show who did what.
Backups: copies of our database can hold information after it's removed, until those copies are deleted.

Your rights

Wherever you live, you can ask us to:

See the personal information we have about you, and get a copy.
Correct anything that's wrong. You can change most of your page yourself at any time.
Delete your account and your information.

To ask, contact us. We'll confirm the request comes from you, usually by checking the email on the account, and reply within the time the law allows. We won't treat you differently for asking.

California

If you live in California, the California Consumer Privacy Act (CCPA) gives you these rights:

To know what personal information we collect, use and share, and to get a copy of it.
To delete it, and to correct it.
To opt out of the sale or sharing of personal information. We don't sell or share it for advertising, so there's nothing to opt out of.
Not to be treated differently for using these rights.

In the last 12 months, we collected these kinds of information, for the reasons in How we use it: identifiers (like your email), account details, payment records, what you put on your page, and counts of views and taps. We don't collect sensitive personal information for any other purpose. You can ask through an authorized agent. We may ask the agent to show that you gave permission.

EU and UK

If you're in the European Economic Area or the United Kingdom, the GDPR applies. [Company legal name] is responsible for your information.

Why we're allowed to use it

To provide the service you asked for: your account, your page, and payments.
Legitimate interests: keeping Profilejar safe and counting views and taps without identifying you.
Legal duties: like keeping payment records.
Your consent, where we ask for it. You can take it back at any time.

Your extra rights

To get your information in a format you can move to another service.
To object to, or limit, how we use it.
To complain to your local data protection authority. We'd like the chance to help first, so please contact us.

Children

Profilejar isn't for children. You must be at least 13 to use it, or at least 16 if you're in the EU or UK. We don't knowingly collect information from anyone younger. If you think a child has given us information, contact us and we'll delete it.

Security

Everything travels over an encrypted connection (HTTPS).
Passwords and log-in cookies are stored only as hashes.
We limit repeated log-in tries.
Only our support team can open accounts, and every time they do, it's recorded.

No system is perfectly secure. If something goes wrong that affects your information, we'll tell you as the law requires.

Where your data is kept

Profilejar is run from the United States, and our servers are there. If you use it from another country, your information goes to the United States, where privacy laws may differ from yours. When we move information out of the EU or UK, we use the safeguards the law allows, such as Standard Contractual Clauses.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is important, we'll show a notice on Profilejar before it takes effect. Using Profilejar after that means the new policy applies.

Contact us

Questions, or want to use any of the rights above? Use our contact form.

By mail: [Company legal name], [address].

Your privacy.