Privacy & Cookies

Effective from August 19, 2026

1. Controller

The data controller is Daniel Slabý, Business ID (IČO) 23671904, registered at Koštov 66, 400 02 Trmice, Czech Republic. Contact: dejny@polytips.eu.

2. What data we process and why

• Account — email, nickname, password hash (bcrypt; we never store the password itself). Basis: contract performance.
• Payments — order data (plan, amount, time) and a payment identifier from Stripe. We have no access to your card number. Basis: contract performance and statutory accounting obligations.
• Service use — opened tips, technical logs (IP address, time) for security and operation, and cookie-free traffic statistics (see art. 6). Basis: legitimate interest.
• Discord link (optional) — your Discord ID to grant the Subscriber role. Basis: contract performance.
• Discord server — our bot on the server logs member server events: joins/leaves, message and reaction counts (never their content), voice activity, roles, and online status. Used for community management and statistics. Basis: legitimate interest; the server is a voluntary community.
• Optional wallet — the wallet address entered in settings is used only for the features you enter it for. Basis: contract performance.

3. Who we share data with

Processors and recipients necessary for operation: Stripe (payments), Vercel (website hosting), Resend (sending emails), Ahrefs (cookie-free traffic statistics), the database and server hosting provider, and Discord (community — governed by its own terms). We never sell your data.

4. How long we keep data

The account and related data for the lifetime of the account; tax records for the statutory period (10 years); technical logs and server statistics for as long as necessary for operation. After account termination we delete or anonymize data, except what we must keep by law.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, and data portability, and the right to object to processing based on legitimate interest. Just write to the contact email. A complaint can be filed with the Czech Office for Personal Data Protection (uoou.gov.cz).

6. Cookies

The website uses a single cookie: pt_session — a strictly necessary technical cookie for login (30-day lifetime, httpOnly). We measure traffic with Ahrefs Web Analytics, which stores no cookies or other identifiers in your browser and does not track you across websites. We deploy no marketing or third-party cookies, so the website does not show a cookie banner (strictly necessary cookies do not require consent, and cookie-free measurement writes nothing to your browser). When paying on Stripe pages, the Stripe privacy policy applies.

7. Security

All communication runs over HTTPS, passwords are stored exclusively as a bcrypt hash, and database access is restricted to operational systems.

This policy is drawn up in Czech and in translations; in case of any discrepancy, the Czech version prevails.