Privacy Policy

1. Data Minimization Commitment

We practice strict data minimization. We only collect the minimal personal data necessary to execute your transaction and deliver your Secret:

• Email Address: To deliver your Secret ID confirmation, receipt, and reveal announcement.
• Billing Name: For transaction authorization and anti-fraud verification.
• Technical Logs: Minimal IP and security logs to protect against brute-force enumeration attacks.

2. Payment Data

Payment card details are entered directly into encrypted iframe elements handled by our PCI-DSS certified payment processor (Stripe). Our application servers never view, process, or store raw credit card numbers or CVC codes.

3. Third-Party Sharing

We do NOT sell, rent, monetize, or trade customer contact information to data brokers, advertising networks, or third parties under any circumstances.

4. Your Rights & Deletion

You have the right to request access to or deletion of your purchase records at any time by contacting privacy@thesecret.club.