1. Information we collect
- Account data: email, username, hashed password, referral code.
- Profile data: optional bio, custom links you add.
- Content: photos you upload, captions, ratings you give, comments, follows, reports, tips you send or receive.
- Payment data: when you purchase a subscription, boost, custom badge, or send a tip, Stripe processes and stores payment details. We only see the last four digits and a Stripe transaction ID.
- Device & log data: IP address, browser type, pages visited, timestamps. Retained for up to 90 days for security and abuse prevention.
- Cookies: a single httpOnly authentication cookie plus a small number of localStorage keys for UI preferences.
2. How we use it
- Operate the Platform (show your posts, deliver ratings, process payments).
- Enforce Community Guidelines and Terms (moderation, reports, safety).
- Send transactional messages (payment receipts, security alerts). We do not send marketing email without opt-in.
- Detect fraud, abuse, and violations of law.
- Improve the Platform through aggregate analytics — we do not sell your personal information.
3. Who we share with
- Stripe, Inc. — payments, subscriptions, tips (see Stripe's privacy policy).
- Emergent Object Storage — hosting of images you upload.
- Law enforcement — only when compelled by valid legal process, or where we have a good-faith belief that disclosure is necessary to prevent harm (including reports to NCMEC per 18 U.S.C. § 2258A).
4. Your rights
Regardless of jurisdiction, you may at any time: (a) access your data via your profile; (b) delete your account and content; (c) contact us at privacy@feetrate.app to exercise data-subject rights.
California residents (CCPA / CPRA)
You have the right to know what personal information we collect, request deletion, correct inaccurate information, opt out of "sale" or "sharing" of personal information, and limit the use of sensitive personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise your rights, email privacy@feetrate.app with the subject "CCPA request". We will not discriminate against you for exercising these rights.
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Delaware (DPDPA)
You have similar rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale, and certain profiling. Send requests to privacy@feetrate.app. We will respond within statutory deadlines.
Nevada residents (NRS 603A.340)
Nevada residents may direct us not to sell certain personally identifiable information. As noted, we do not sell personal information; the direction is honored by default.
EEA, UK, and Switzerland (GDPR / UK-GDPR / FADP)
Legal basis for processing: performance of contract (operating your account), legitimate interest (safety, security, fraud), and consent (where applicable). You have rights of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with a supervisory authority. Data may be transferred to the United States under Standard Contractual Clauses.
Brazil (LGPD)
Brazilian users have rights equivalent to those under the GDPR. The controller is footsie; the DPO can be reached at privacy@feetrate.app.
5. Children
The Platform is for adults 18+ only. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has created an account, we will remove it immediately. Report suspected minor accounts to trust@feetrate.app.
6. Security
Passwords are hashed with bcrypt. All traffic is served over HTTPS. Payment card data never touches our servers — Stripe handles it. No system is perfectly secure; report suspected vulnerabilities to security@feetrate.app.
7. Cookies & tracking
We use one essential authentication cookie and localStorage for UI preferences. We do not use third-party advertising cookies. If we ever add analytics, we will surface a consent banner and update this policy.
8. Changes
We may update this Privacy Policy. Material changes will be announced on the site.