Privacy Policy

This Privacy Policy explains how [ENTITY NAME] (“we,” “us,” or “our”) collects, uses, and protects your personal information when you apply for membership, accept an invitation, or use Project·X (the “Service”), an invitation-only, members-only community for collectors. By using the Service, you agree to the practices described here.

The Service is restricted to individuals who are at least 21 years of age. We do not knowingly collect information from anyone under 21.

1. Information We Collect

Information you provide directly

• Account & profile. When you join, we collect your email address, display name, and unique handle. You may optionally add a short bio and an avatar image.
• Age confirmation. We record that you have attested to being 21 or older, along with the date of that attestation. We do not collect or store your date of birth.
• Waitlist & applications. If you request an invitation, we collect the email address and name you submit, along with any message you provide about why you’d like to join.
• Collection entries (“Safe”). The Safe is your private collection vault. For items you record there, we store only the last four characters of any serial number you enter. Full serial numbers are never exposed through the application and are not shared with other members.
• Content you post. Posts, comments, direct messages, and other content you submit to the Service.

Information collected automatically

• Authentication & session data. We use cookies strictly to keep you signed in, maintain your session, and support switching between multiple accounts. We do not use advertising or third-party tracking cookies.
• Privacy-friendly analytics. We use Plausible Analytics to understand aggregate usage of the Service (such as page views and referral sources). Plausible is cookieless, does not track you across websites, and does not collect any personal or personally identifiable information. All metrics are aggregated and anonymous — we cannot use them to identify individual members.
• Technical data. Our infrastructure providers may process standard technical information (such as IP address and browser type) as needed to operate and secure the Service.

Payment information

Membership payments are processed by Stripe. We do not receive or store your full card number. We retain a Stripe customer identifier and subscription details (such as your membership tier and status) so we can manage your subscription.

2. How We Use Your Information

• To create and manage your account and membership.
• To operate, maintain, and secure the Service.
• To process membership payments and manage subscriptions.
• To communicate with you about your account, invitations, and service-related notices.
• To enforce our Terms of Service and prevent abuse.
• To comply with legal obligations.

3. How We Share Information

We do not sell your personal information. We share information only with the service providers that help us operate the Service:

• Supabase — authentication, database, and file storage.
• Stripe — payment processing and subscription management.
• Postmark — transactional and account-related email delivery.

These providers process information on our behalf under their own terms and privacy commitments. We may also disclose information if required by law or to protect the rights, safety, and security of our members and the Service.

Content you choose to share within the community (such as your profile, posts, and comments) is visible to other members according to the visibility of where you post it. Your Safe and its contents remain private to you.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

5. Your Rights & Choices

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can update much of your profile information directly in the Service. To exercise any other rights, contact us at x@patterns.co and we will respond as required by applicable law.

California residents (CCPA/CPRA). We do not sell or share your personal information for cross-context behavioral advertising. You have the right to know what we collect, to request deletion, and to not be discriminated against for exercising these rights.

EEA/UK residents (GDPR). We process your information to perform our contract with you (providing the Service), to comply with legal obligations, and based on our legitimate interests in operating and securing the Service. You have the right to access, rectify, erase, and port your data, and to lodge a complaint with your local supervisory authority.

6. Data Security

We use reasonable technical and organizational measures to protect your information, including access controls and restricted exposure of sensitive fields such as serial numbers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Transfers

We and our service providers may process your information in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers.

8. Children’s Privacy

The Service is intended only for adults 21 and older. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected such information, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes may be communicated to you. Your continued use of the Service after an update means you accept the revised policy.

10. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws principles.

11. Contact Us

If you have questions about this Privacy Policy or your personal information, contact us at x@patterns.co.