California Privacy Notice

Your privacy rights

Under the CCPA, California residents have the following rights. We honor them for all users.

• Right to know. Ask what categories and specific pieces of personal information we collected about you in the last 12 months, where it came from, why we collected it, and who we shared it with.
• Right to access and data portability. Request a copy of your personal information in a portable format.
• Right to delete. Ask us to delete the personal information we collected, subject to legal exceptions such as completing a transaction or meeting a legal obligation.
• Right to correct. Ask us to fix personal information about you that is inaccurate.
• Right to limit use of sensitive information. Ask us to use your sensitive personal information only as needed to provide our services.
• Right to opt out of sale or sharing. Opt out of the sale of your personal information and of sharing it for cross-context behavioral advertising.
• Right to non-discrimination. We will not treat you differently or give you a worse experience for exercising any of these rights.

How to exercise your rights

Choose whichever is easiest:

• Email us at [email protected] with the right you want to exercise and the email address on your account.
• Use your account settings on Buy Me a Coffee to access or delete much of your information directly.
• Write to us at the address in our Privacy Policy.

To protect your account, we will verify your identity before acting on your request, which usually means confirming the email address associated with your account. We will respond within the timeframe required by law.

You may designate an authorized agent to make a request for you. Before we act on it, we must confirm the agent is authorized (a natural person or a business entity registered with the California Secretary of State), receive a copy of your written authorization, and verify your identity directly.

Information we collect

Over the last 12 months we have collected the following categories of personal information, as described in more detail in our Privacy Policy:

• Identifiers such as your username, email address, and IP address.
• Payment and transaction information processed through our payment processor, Stripe, which provides us with a token, your card type, expiration date, and the last four digits of your card, along with any name and email you give them.
• Support activity such as the creators you support, the level and frequency of support, and the rewards you receive.
• Internet and usage information such as browser type, language preference, referring site, and the date and time of your requests, collected in part through cookies and Google Analytics.
• Content you provide, such as your profile details and anything you post.

We collect this information from you directly, automatically as you use the platform, and from service providers such as our payment processor. We will not collect new categories of personal information, or use what we collected for materially different purposes, without giving you notice.

How we use and disclose information

We use personal information to operate the platform, process payments and payouts, provide support, keep the service secure, and communicate with you. We disclose it to:

• Service providers who process it on our behalf, such as Stripe (payments) and Google (analytics).
• Affiliates and professional advisors in connection with our operations and compliance activities.
• Authorities when we have a legal obligation, or where disclosure is reasonably necessary to protect the rights, property, or safety of Buy Me a Coffee, our users, or the public, for example in response to a subpoena, court order, or governmental request.
• An acquirer in connection with a merger, acquisition, or other business transfer, as described in our Privacy Policy.

Sale and sharing of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your personal information to serve targeted or retargeted ads.

Because we do not sell or share your personal information as those terms are defined under California law, there is nothing to opt out of. If this ever changes, we will update this notice and provide a way to opt out.

Sensitive personal information

We only use and disclose sensitive personal information, such as your account login credentials and the payment details needed to process transactions, as necessary to provide our services. We do not use it to infer characteristics about you.

Note that CCPA "sensitive personal information" is different from the "special categories" under the EU's GDPR. We do not intentionally collect special categories such as government identifiers, racial or ethnic origin, political or religious beliefs, health data, genetic data, or biometric data.

Non-discrimination

We will not discriminate against you for exercising any of your privacy rights. You will receive the same service, price, and quality whether or not you make a request.

Changes to this notice

We may update this notice from time to time. When we do, we will post the updated version on this page and change the "last updated" date at the top.