Privacy Policy

Last updated: July 15, 2026

Introduction

Stupid Club ("we", "our", or "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our website, checkout, community, and member services.

Information We Collect

• Account and contact information: your name, email address, Discord account details you provide, and support messages.
• Payment and subscription information: membership plan, Stripe checkout session, subscription status, purchase amount, renewal status, and billing metadata. Stripe processes card details directly; we do not store full card numbers.
• Community and benefit access information: Discord invite usage, member role status, claim-invite information, Google email for Club Group, meetings, and one-on-one access, and Perssua email for Premium access.
• YouTube verification information: when enabled and authorized by you, we use YouTube OAuth only to verify whether you are a current member of Lucas Montano's YouTube channel and whether you qualify for a discount.
• Calendar participation information: if you claim a calendar-based event or course, we may process the email address needed to send the calendar invitation.
• Technical information: cookies, log data, browser details, device information, and basic usage data needed to operate and secure the service.
• Optional member directory information: a display name, X/Twitter or Instagram handle, project URL, and your separate choices about publishing a profile and publishing aggregate revenue.
• Member authentication and eligibility: when you use the member portal, Google provides a verified identity token containing your Google account identifier, email, name, and email-verification status. We use a one-way keyed identifier in the application and encrypt the verified email. We check your email against the Stupid Club Google Group at login, on protected requests, and during periodic membership sweeps. We do not keep Google access or refresh tokens from sign-in.
• Optional Stripe reporting information: if you connect Stripe, the Stripe App provides an account mapping and rotating OAuth refresh token. The token is encrypted at rest. We request only read access to report types and aggregate report runs, keep short-lived access tokens only in process memory, and retain aggregate currency, gross, fee, net, count, reporting category, and reporting date. We do not request or retain Stripe customers, charges, payment methods, itemized report rows, or pasted API keys.

How We Use Information

• Process Lifetime purchases and annual subscriptions.
• Grant access to the Discord community, Club Group, member benefits, meetings, videos, Perssua Premium, and events.
• Send transactional emails, invitations, renewal or billing notices, and support replies.
• Verify YouTube membership discounts when you choose to connect YouTube.
• Prevent abuse, troubleshoot issues, comply with legal obligations, and keep records of transactions.
• Authenticate member-portal users, verify current Club Group membership, operate optional public member profiles, and calculate optional all-time and trailing-30-day Stripe gross-sales aggregates.

Third-Party Services

We use service providers to run Stupid Club, including Stripe for payments and subscriptions, Discord for community access, Resend for email delivery, Google and YouTube APIs for optional verification or calendar features, and hosting or infrastructure providers. These providers process information according to their own terms and privacy policies.

Cookies

We use cookies and similar technologies to keep track of authentication state, YouTube verification state when enabled, and basic site functionality. The member portal uses a separate signed, secure, HTTP-only cookie containing only an opaque member identifier, expiry, and CSRF binding. You can control cookies in your browser settings, but some features may stop working if cookies are disabled.

Data Retention

We keep information for as long as needed to provide the service, maintain transaction records, resolve disputes, enforce our agreements, and comply with legal requirements. Member-directory data is separate from legally required transaction records. A confirmed removal from the Club Google Group deletes the member profile, encrypted verified email, Stripe account mapping and refresh token, revenue aggregates, and queued member work. Google or Stripe outages do not trigger deletion. Disconnecting Stripe deletes only the Stripe connection and revenue aggregates. Rejoining creates a fresh empty profile. Infrastructure snapshots, if used, are encrypted and kept only for a documented short retention period.

Your Choices and Rights

• You may revoke YouTube or Google access in your Google account settings.
• You may request annual subscription cancellation by emailing [email protected].
• You may request access, correction, deletion, or export of personal information, subject to applicable law.
• You can keep a member profile private, publish it without revenue, publish revenue separately, disconnect Stripe, or delete the entire member profile from the portal.

Security

We use reasonable technical and organizational safeguards to protect personal information. Member secrets are stored outside the website checkout state, encrypted with authenticated encryption, restricted by filesystem permissions, and handled by an isolated service. No online service can guarantee absolute security.

International Use

Your information may be processed in countries other than where you live. By using the service, you understand that information may be transferred and processed where we or our providers operate.

Children

Stupid Club is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

Contact

Questions or privacy requests can be sent to [email protected].