Privacy Policy

This policy explains what TODO_LEGAL_ENTITY_NAME collects when you use members.alenaharmony.com, why, and what control you have. We collect as little as the service allows — discretion matters to our members, and it matters to us.

What we collect

• Account identity. If you sign in with Patreon, we receive your Patreon user ID, name, email, and membership tier — only enough to confirm what you have access to.
• Purchase records. For individual purchases we store your email address and which items you own, so access can be restored.
• Payment data. Handled entirely by our payment processor. We never receive or store your full card number.
• Messages. If you message our Telegram account, message content and your Telegram ID are retained for up to 90 days, then purged.
• Technical logs. Standard server and CDN logs (IP address, timestamp, requested resource) for security and abuse prevention.

We do not run advertising trackers and we do not sell personal data to anyone, ever.

Why we use it

To verify age and entitlement, deliver content you paid for, process payments, provide support, prevent fraud and credential sharing, and meet legal recordkeeping obligations.

Who we share it with

Only service providers necessary to run the service, each acting on our instructions: our payment processor (billing and dispute handling), Patreon (membership verification), our hosting, database, and CDN providers (delivery), and our age-verification provider. We may disclose information where required by law.

How long we keep it

Purchase and entitlement records are kept as long as needed to provide access and to satisfy financial and legal retention requirements. Telegram message logs are purged after 90 days. Access links expire after 7 days and are single-use.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. Email TODO_SUPPORT_EMAIL and we will respond within the period required by law. Note that we may need to retain some records for tax, fraud-prevention, and age-verification compliance even after a deletion request.

Security

Access is gated server-side, content is watermarked and streaming-only, and access links are single-use and time-limited. No system is perfectly secure, but we design for discretion by default.

Children

This service is strictly for adults. We do not knowingly collect data from anyone under 18. If we learn that we have, we delete it.

Contact

TODO_LEGAL_ENTITY_NAME — TODO_SUPPORT_EMAIL