Effective date: 2026-03-29 | Version: 2026-03-29
This Privacy Policy describes how JustPearlyThings, LLC ("The Audacity Network", "we", "us", or "our") collects, uses, stores, and discloses your personal data when you use our website and services. We are the data controller for the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Account identity | Username, password (hashed — never stored in plain text) | You, at registration |
| Contact details | Email address, phone number | You, at registration or profile update |
| Profile information | First and last name, title, suffix, occupation, date of birth, age, sex, marital status, number of children, political party affiliation | You, optionally via your profile |
| Postal addresses | Mailing address, billing address (street, city, state, ZIP, country) | You, when donating or updating your profile |
| Donation & payment records | Donation amount, frequency, transaction date, transaction type | Generated when you make a donation |
| Consent records | Date of consent, policy version accepted, IP address at time of consent | Captured automatically when you opt in |
| Authentication data | Last login timestamp, account lock status | Generated automatically on login |
| Roles & entitlements | Membership tier, subscriber status, administrative roles | Assigned by us based on your account |
| Security audit data | IP address, action type, timestamp (for login, export, profile update, deletion events) | Captured automatically for security purposes |
We do not store raw payment card numbers. Card processing is handled entirely by our third-party payment processor, Stripe (see Section 5).
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract (Art. 6(1)(b) GDPR) |
| Processing donations and maintaining financial records | Performance of a contract; Legal obligation (7-year financial record retention) |
| Sending newsletters, updates, and marketing emails | Consent (Art. 6(1)(a) GDPR) — you may withdraw at any time |
| Providing access to members-only content and features | Performance of a contract |
| Security monitoring, fraud prevention, and audit logging | Legitimate interests (Art. 6(1)(f) GDPR) |
| Complying with legal obligations (tax records, GDPR responses) | Legal obligation (Art. 6(1)(c) GDPR) |
| Data type | Retention period |
|---|---|
| Account & profile data | Until account deletion is processed, or 3 years after last login if inactive |
| Donation transaction records | 7 years from the transaction date (legal / tax obligation) |
| Email marketing consent records | For the life of the account, plus 3 years after deletion (proof of consent) |
| Security audit logs | 2 years from the date of the logged event |
| Erasure request records | 5 years after the request is processed (evidence of compliance) |
When a GDPR erasure request is processed, identifying personal data (name, email, address, phone) is replaced with anonymised values. The anonymised account row is retained to preserve the integrity of donation and audit records. It is not linked to you in any identifiable way after processing.
We use one cookie. There are no analytics cookies, advertising cookies, or third-party tracking cookies on this site.
| Cookie name | Type | Purpose | Duration | Consent required? |
|---|---|---|---|---|
auth (session token) |
Strictly necessary | Keeps you logged in by storing a signed JWT. Without this cookie the login system cannot function. | Expires when you log out, or after the token TTL configured on the server (typically 24 hours) | No — strictly necessary cookies are exempt from consent requirements under the ePrivacy Directive and UK PECR. |
Because this is the only cookie we set and it is strictly necessary for the service to function, we display an informational notice rather than a consent gate. You can dismiss the notice and it will not be shown again on that device.
This cookie is HttpOnly (inaccessible to JavaScript) and is not shared with any third party. It does not track you across other websites.
We share personal data with the following processors under appropriate data processing agreements:
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| Amazon Web Services (AWS SES) | Transactional and bulk email delivery | Name, email address, unsubscribe token | United States (us-east-2) |
| Stripe, Inc. | Payment processing for donations and subscriptions | Name, billing address, email, payment card data (card data never touches our servers) | United States |
| Discord, Inc. | Community integration and Discord guild management | Discord user ID, username, roles | United States |
All transfers to the United States from the EEA are covered by Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework where applicable.
Depending on your jurisdiction, you have the following rights regarding your personal data:
We will respond to data subject requests within 30 days. Complex requests may be extended to 90 days; we will notify you of any extension.
Our services are not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated by email to users with active notification preferences, and the effective date above will be updated. Continued use of our services after the effective date constitutes acceptance of the updated policy.
Data Controller:
JustPearlyThings, LLC
Data Protection Contact:
justpearlythings@gmail.com