1. What we collect

• The content you submit: display name, message, links, and your crest choice.
• Your IP address and User-Agent at the moment you claim, plus a salted hash of your IP used for rate limiting.
• Timestamps, the Terms version you accepted, and the digest of that exact text.
• From Stripe: a payment intent id, the amount, the card country, and a risk score.

Card numbers never touch our servers. Payment is taken on Stripe-hosted Checkout, which keeps us in PCI SAQ A, the lightest tier.

Stripe collects your email address for the receipt. We do not store the plain address — we store only a salted HMAC of it, for abuse correlation. When support genuinely needs the address we look it up in the Stripe dashboard.

2. Why we are allowed to hold it

• Performance of a contract: displaying what you paid to display.
• Legitimate interests: fraud prevention, abuse handling, security, and defending legal claims.
• Legal obligation: keeping tax and accounting records.

3. How long we keep it

• Displayed content: indefinitely, in the public archive.
• IP address, User-Agent and the dispute-evidence set: 180 days.
• Hashed IP used for rate limiting: 30 days.
• Raw pre-normalization submissions: 180 days, admin-only, except under legal hold.
• Server logs: 30 days.

4. Who processes it with us

• Cloudflare — hosting, CDN, DNS and the Turnstile challenge.
• Stripe — payments.
• Google Safe Browsing — URL reputation. This sends the submitted URL, never visitor data.
• Our operational alerting webhook provider — receives throne-change notifications.

Data is processed in the United States and on Cloudflare’s global network.

5. Public by design

Content you submit and the amount you paid are published publicly and permanently. Do not submit anything you would not want attached to you forever.

6. Cookies

There are no tracking cookies, no advertising cookies, and no cross-site tracking on this site. The only client-side state is a small key in your browser’s localStorage that remembers your own claim so we can show you the right message if you are dethroned, plus the claim token in your return URL. Cloudflare Turnstile may set a short-lived cookie strictly to run the challenge.

7. Your rights

You may request access, correction, deletion, objection, or portability by emailing privacy@thethroneproject.com. We respond within 30 days.

Reconciling erasure with a permanent public ledger: on a valid erasure request we redact the displayed content and the raw submission and delete your IP and User-Agent, while retaining a pseudonymized financial record — claim id, amount, timestamp and payment intent — under our legal obligation to keep accounting records and to defend legal claims.

8. Children

This site is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has submitted content, mail privacy@thethroneproject.com and we will remove it.