// legal
PRIVACY POLICY
How we handle your data
Last updated: May 2025. This policy applies to cultcodex.me.
Who We Are
CultCodex is an independent fan archive of the Cult of Psyche livestream community. We operate the website at cultcodex.me.
Information We Collect
Account Information
When you sign in via Google OAuth, we receive your Google account name, email address, and profile photo. We store your email address and display name to identify your account. We do not store your Google password.
Payment Information
Subscription payments are processed by Stripe. We never see or store your card number, CVV, or full payment details. Stripe returns a customer ID and subscription status, which we store to gate subscriber features. Stripe's privacy policy governs payment data.
Usage Data
We use Vercel Analytics (privacy-preserving, no cookies, no cross-site tracking) to measure aggregate page views and performance metrics. No personally identifiable information is collected in this process.
User-Generated Content
Content you submit through the corrections form, comments, or Oracle queries is stored to fulfil the service. Corrections and comments may be reviewed by archive maintainers.
How We Use Your Information
- To authenticate your account and remember your session
- To verify your subscription tier and gate subscriber-only features
- To send transactional emails (e.g. subscription receipts via Stripe)
- To process correction requests and improvement feedback
- To measure aggregate site performance (Vercel Analytics)
We do not sell your personal data. We do not use your data for advertising profiling.
Data Retention
Account data is retained as long as your account exists. You may request deletion of your account and associated personal data by emailing us at the address below. Stripe subscription records are governed by Stripe's retention policies.
Cookies and Local Storage
We use a session cookie to maintain your login state (via NextAuth.js). This cookie is strictly necessary for the site to function and does not track you across other websites. Vercel Analytics operates without cookies.
Third-Party Services
- Google OAuth — sign-in authentication
- Stripe — payment processing
- Vercel — hosting and analytics
- Anthropic Claude — AI enrichment of archive data (content only, not user data)
- OpenAI Whisper — transcript generation (audio content only, not user data)
Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you. To exercise these rights, contact us using the corrections page or the email address below.
GDPR (EU/UK residents): You have the right to access, rectify, erase, restrict processing, data portability, and to object. You may also lodge a complaint with your local supervisory authority.
CCPA (California residents): You have the right to know what personal information is collected, to opt out of sale (we do not sell data), and to request deletion.
Contact
For privacy-related requests or questions, use our corrections page or reach out through the community channels linked in the archive.