Privacy Policy

• Account: email address and a securely hashed password (we never store your password itself).
• Profile: everything you choose to publish — username, display name, bio, links, images and styling choices.
• Payments: when you buy Premium, the payment provider processes your card. We receive a transaction id, amount, currency and the email used at checkout — never your card details.

Profile analytics are privacy-friendly by design:

• We don't use tracking cookies or third-party analytics.
• We don't store visitors' IP addresses.
• To avoid double-counting, we store a short hash derived from a secret, the date, the IP and the browser string. It changes every day and can't be reversed or used to follow someone across days.
• We keep only the referring website's domain and a coarse device type (mobile / tablet / desktop).

We set one strictly necessary cookie when you log in: a secure, HTTP-only session cookie. There are no advertising or tracking cookies.

To run your account and profile, secure the service (rate limiting, abuse prevention), process Premium purchases, send transactional emails (verification, password reset, receipts) and show you your own statistics. We don't sell personal data and we don't send marketing spam.

We rely on infrastructure providers for hosting, database, file storage, email delivery and payments. They process data only on our instructions.

You can delete your account at any time from Settings. Your profile, links, media and analytics are deleted. We retain payment records as required for accounting and tax purposes, detached from your deleted profile. Your username is held for 30 days to prevent impersonation.

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to certain processing. Contact us and we'll help.

Passwords are hashed with scrypt, sessions use secure HTTP-only cookies, uploads are re-encoded and validated, and all traffic is encrypted with HTTPS.

Percent Club is not directed to children under 13, and we don't knowingly collect their data.