Privacy Policy
Effective date: [DATE]
This policy explains what personal information Chris Morrell ("we," "us") collects through chris.club ("Chris Club" or the "site"), how we use it, and your choices. Questions? Email [email protected].
The short version
- We use Stripe for payments and ID checks. We never see your card number. We never keep your ID images or selfie.
- After your ID check, we keep only your verified given names and last name, encrypted. We then tell Stripe to delete the ID images and selfie it holds for us.
- Your number, chosen display name, badges, and similar details are public. Your email and verified names (beyond the display name you pick) are not.
- We don't sell or share your personal information for advertising. We don't use analytics or ad trackers.
1. What we collect
Information you give us
| What | When |
|---|---|
| Given names, last name, email, password (stored only as a secure hash) | When you join |
| Display name choice | When you set up your page |
| Nominee's first name and email | When you nominate someone |
| Your email (if not signed in) | When you prepay a nomination |
| Anything you send us | When you email us |
Information from Stripe
Payments. Stripe handles your card details. We receive the amount, whether the payment succeeded, your email, and Stripe's reference numbers. We do not receive your full card number.
ID verification. We use Stripe Identity for identity document verification. Stripe collects images of your government ID and a selfie, and uses facial recognition to compare them. Stripe asks for your consent before you start. We receive:
- Whether verification succeeded or failed.
- Your verified given names and last name.
We do not receive or keep your ID images, selfie, ID number, date of birth, address, or any biometric data. You can learn more about Stripe and read its privacy policy at stripe.com/privacy.
Fraud prevention. We use Stripe for payments, analytics, and other business services. Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its privacy policy at stripe.com/privacy.
Information collected automatically
- Server logs: IP address, browser type, pages requested, and time. We use these for security, rate limiting, and fixing problems.
- Page hit counts: we count visits to each member page. We store only the total, not who visited.
- Cookies: only the ones needed to run the site (keeping you signed in and protecting forms from abuse). We don't use advertising or analytics cookies. The web ring embed sets no cookies.
2. Biometric information
Stripe's ID check uses facial geometry from your selfie and ID photo to confirm they match. Stripe, not us, collects and processes this biometric information, with your consent, under its own privacy policy.
- We never receive, store, or have access to biometric information.
- As soon as your verification finishes (pass or fail), we ask Stripe to redact the verification. This deletes the ID images and selfie Stripe holds on our behalf. Stripe may keep some data longer where the law requires it or for fraud prevention, as its privacy policy describes.
- We do not sell, lease, trade, or otherwise profit from biometric information.
3. How we use your information
- To create and run your account and member page.
- To check that you're eligible (that your legal given name is a Chris name).
- To process payments, refunds, and disputes.
- To send emails about your account, purchases, and verification results, and to send nomination emails you request.
- To keep the site secure and prevent fraud, spam, and abuse.
- To show public features like badges, stats, Chris of the Day, and featured rejections.
- To meet legal and accounting obligations.
We don't send marketing emails. If we ever do, we'll ask first.
4. What is public
Visible to anyone, including in embeds, share images, and search results:
- Your member number and the display name you choose (given name, given name and last initial, or full name).
- Your avatar, badges, certification counts, page hit count, join date, and Chris of the Day history.
- Whether your membership was revoked because of a disputed payment.
- If you were rejected: possibly the given name you typed, or short text we write about the rejection. Never your last name, email, or anything from your ID. Email us to have it removed.
Site-wide statistics (like how many Chrises have each name or badge) are shown only as totals.
5. Who we share it with
We share personal information only with:
| Who | Why |
|---|---|
| Stripe | Payments and ID verification |
| Laravel Cloud and its hosting providers | Running the site and storing data |
| Cloudflare | Sending emails |
| Authorities or others, when the law requires it | To comply with the law, respond to legal process, or protect rights and safety |
| A buyer or successor, if Chris Club is sold or merged | They would be bound by this policy |
We don't sell your personal information or share it for targeted advertising.
6. How long we keep it
| Information | How long |
|---|---|
| Account and profile | Until you delete your account |
| Verified names | Until you delete your account, or 30 days after a failed verification |
| ID images, selfie, biometrics | We never hold them. We ask Stripe to delete them as soon as verification finishes. |
| Payment records | 7 years, for tax and accounting. Your email is removed from them when you delete your account, unless we need it to handle a dispute. |
| Rejection records (typed given names, reason) | Until you ask us to remove them |
| Nominations | 90 days after expiry or claim |
| Server logs | 30 days |
7. Your choices and rights
You can:
- See and change your display name format, email, and password from your dashboard.
- Delete your account from your dashboard. This removes your profile, page, badges, and certifications, and retires your number.
- Ask us for a copy of your personal information, to correct it, or to delete it, by emailing [email protected]. We'll confirm it's you (usually through your account email) and answer within 45 days.
- Contact Stripe at [email protected] about data Stripe holds as its own controller.
Depending on your state, you may have more rights under state privacy laws. We honor these requests for everyone, no matter where in the US you live. If we deny a request, you can appeal by replying to our answer; we'll respond within 45 days. We won't treat you differently for using your rights.
We honor Global Privacy Control signals, though we don't sell or share data for advertising in the first place.
8. Security
The site uses HTTPS everywhere. Passwords are hashed. Verified names are encrypted in our database. Payments and ID checks happen on Stripe's pages, not ours. Admin access requires two-factor sign-in. No system is perfectly secure, but if a breach affects your information, we'll tell you as the law requires.
9. Age limit
Chris Club is only for adults 18 and older. We don't knowingly collect information from anyone under 18. If you believe a minor has given us information, email [email protected] and we'll delete it.
10. Where your data is stored
Chris Club is for US residents. We store and process data in the United States.
11. Changes to this policy
If we make a material change, we'll post it here and email members at least 14 days before it takes effect.
12. Contact
Chris Morrell
9450 SW Gemini Dr PMB 913056
Beaverton, Oregon 97008-7105
United States
Email: [email protected]