Privacy Policy

This Privacy Policy explains how The Server LLC ("we," "us," "our") collects, uses, and protects your information when you use theserver.app (the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: email address, username, display name, and password (encrypted)
• Profile information: bio, language preference, notification settings
• Subscription information: subscription tier, status, and Stripe customer ID (we do not store full payment card details)
• Usage data: article completion progress, picks viewed, community activity
• Technical data: IP address, browser type, device information, session cookies

2. How We Use Information

We use your information to:

• Provide and maintain the Service
• Process subscription payments and manage your account
• Personalize your experience (language, tier-appropriate content)
• Send transactional emails (welcome, receipts, password resets)
• Send marketing emails (only if you opt in)
• Improve the Service and develop new features
• Comply with legal obligations and prevent fraud

3. Information We Do NOT Sell

We do not sell, rent, or trade your personal information to third parties. Period.

4. Third-Party Services

We use the following third-party services to operate The Server:

• Supabase: Database and authentication infrastructure. Data is encrypted at rest and in transit.
• Stripe: Payment processing. Stripe handles all payment card data directly — we never see or store your full card number.
• Resend (planned): Transactional email delivery.
• Vercel: Hosting and content delivery.

Each of these services has its own privacy policy. We choose them based on their security and privacy standards.

5. Cookies

We use essential cookies to maintain your session and remember your language preference. We may also use analytics cookies to understand how the Service is used. You can disable cookies in your browser settings, but doing so may affect functionality.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., tax records, fraud prevention).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications
• Object to certain types of processing

To exercise these rights, contact us at privacy@theserver.app. We will respond within 30 days.

8. Security

We implement reasonable technical and organizational measures to protect your data, including encryption, access controls, and regular security reviews. However, no system is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

9. Children's Privacy

The Service is not directed to individuals under 21. We do not knowingly collect personal information from anyone under 21. If we discover such data, we will delete it immediately.

10. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or notice on the Service at least 14 days before taking effect.

12. Contact

For privacy questions or requests, contact us at: privacy@theserver.app