Privacy Policy
Last updated: October 7, 2026. Pre-launch draft — the connector is in development. Operated by Snowball & Son Heavy Hauling (DBA). Contact: snowball1452@gmail.com.
1. What we collect — and what we never touch
Payment card data will never touch our servers. All card entry and processing is handled by Stripe (our payment processor) through Stripe Elements, Stripe Checkout, or Stripe Link. We never receive, process, or store card numbers, CVCs, or bank credentials.
What we will store, per transaction:
- Stripe identifiers (payment intent, charge, connected account, payout IDs)
- Transaction amounts in cents, timestamps, and currency
- Creator account identifiers and payout tier status
- An anonymized, one-way supporter fingerprint used only for fraud correlation (e.g., detecting card-testing patterns)
- Optional Supporter Communications: if provided by the supporter, short text notes (up to 140 characters) accompanying a gratuity are transmitted to the creator
2. How we use it
- To process and record tips, compute fees, and issue receipts
- To operate creator payouts, payout holds, and fraud protections
- To detect abuse (velocity checks, card-testing quarantine, dispute monitoring)
- To comply with legal obligations, including tax reporting thresholds where applicable
We do not build marketing profiles from payment data. We do not sell personal data.
3. Who sees it
- Stripe, Inc. — processes every payment under Stripe's Privacy Policy.
- Meta Platforms, Inc. — the Creator Tip Jar is being developed as a connector for Meta Muse and will be subject to Meta's platform terms and data handling.
- Legal compliance — we cooperate with lawful information requests and report suspicious activity as required by law.
4. Data retention
Transaction records are retained as long as needed to operate payouts, resolve disputes, and meet legal and tax obligations. Dormant ledger entries are archived per our dormancy policy (see Terms of Service). You may request deletion of non-essential data at snowball1452@gmail.com; records we are legally required to keep will be retained.
5. Security
We build with least-privilege access, encryption in transit, and a standing rule that secrets never live in code or logs. In the event of a confirmed security incident involving user data, we commit to notifying Meta within 48 hours and cooperating with any investigation.
6. Your choices
- Supporter messages are optional and can be posted anonymously.
- Creators may disable public display of supporter messages.
- You may contact us at snowball1452@gmail.com with privacy questions or requests.
7. Changes
Material changes to this policy will be announced on this page at least 14 days before taking effect.