🔒 Privacy

Privacy Policy

Your privacy matters to us. Here's exactly what we collect, why, and how we protect it.

Last updated: March 16, 2026

1. Information We Collect

We collect the minimum information necessary to operate the Platform and fulfill orders.

From Twitch OAuth (Creators & Authenticated Users)

When you sign in with Twitch, we receive and store:

  • Twitch user ID
  • Username and display name
  • Email address
  • Profile image URL
  • Broadcaster type (affiliate, partner, etc.)

From Supporters at Checkout (via Stripe)

When you place a pre-order, Stripe collects:

  • Full name
  • Email address
  • Shipping address
  • Payment information (handled entirely by Stripe)

What We Do NOT Collect

We do not collect or store credit card numbers, CVVs, or any raw payment card data. All payment processing is handled by Stripe.

2. How We Use Your Information

We use the information we collect to:

  • Operate the Platform — authenticate your identity, display your profile, and manage campaigns.
  • Process orders — fulfill pre-orders, coordinate manufacturing, and ship pins to the correct address.
  • Communicate about campaigns — send order confirmations, shipping updates, and campaign status notifications.
  • Send order and shipping updates — notify you when your pins are manufactured, shipped, and delivered.
  • Prevent fraud — detect and prevent fraudulent campaigns, fake orders, and abuse of the Platform.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

Pinpog relies on the following third-party services to operate. Each service has its own privacy policy governing how they handle your data:

4. Cookies

We use a single session cookie (pinpog.sid) to maintain your login state. This cookie is essential for the Platform to function and is set when you sign in with Twitch.

We do not use advertising cookies, tracking cookies, or any third-party analytics cookies. We do not participate in ad networks or cross-site tracking.

5. Data Retention

  • Account data — retained while your account is active. If you request account deletion, we will remove your profile data within 30 days.
  • Order and transaction data — retained for 7 years for legal, tax, and compliance purposes, as required by applicable law.
  • Campaign data — retained as part of the public record of completed campaigns. Creator profiles associated with campaigns may be anonymized upon account deletion.

You may request deletion of your personal data at any time by contacting us at [email protected].

6. Data Security

We take reasonable measures to protect your personal information, including:

  • HTTPS encryption — all data transmitted between your browser and our servers is encrypted via TLS.
  • Secure session cookies — session cookies are marked as HttpOnly and Secure, preventing client-side access and transmission over unencrypted connections.
  • Password hashing — where applicable, sensitive data is hashed using bcrypt.
  • Stripe-managed payment data — all credit card and payment information is handled entirely by Stripe's PCI-compliant infrastructure. We never see or store your card details.

While we strive to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of any inaccurate personal data.
  • Deletion — request deletion of your personal data, subject to legal retention requirements.
  • Portability — request your data in a structured, machine-readable format.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of the sale of personal information. Pinpog does not sell personal information.

To exercise any of these rights, contact us at [email protected].

8. Children's Privacy

Pinpog is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically to stay informed about how we protect your information.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

Operator: Plus One Web LLC