Privacy Policy
Last updated: June 12, 2026
This policy explains what BuyMeTokens (“BuyMeTokens”, “we”, “us”) collects, how we use it, and who we share it with. By using the service you agree to this policy.
1. Information we collect
- Account: your email address and name, from email sign-up or from Google sign-in.
- Creator profile: your handle, display name, bio, avatar URL, and monthly goal.
- Supporter details:the optional name and message a supporter adds when funding a creator. These are shown publicly on the creator’s page.
- Payment data: handled by our payment provider (Dodo Payments, our merchant of record). We receive confirmation and order metadata such as amount and pack, not your full card details.
- Technical data: basic logs and a session cookie that keeps you signed in.
2. Google sign-in
If you sign in with Google, we receive your email address and basic profile (your name) through the standard
openid, email, and profile scopes. We do not access anything else in your Google account, and we use this data only to create and secure your account.3. How we use your information
We use your information to operate the service: create and run your page, deliver OpenRouter credits, process payments and refunds, prevent fraud and abuse, and contact you about your account. We do not sell your personal data.
4. Service providers we use
We share data only with processors that help us run the service:
- Convex — application database and backend.
- Better Auth — authentication and session management.
- Dodo Payments — payment processing as merchant of record.
- OpenRouter — provisioning the AI credits delivered to creators.
- Vercel — application hosting.
5. Information that is public
Some data is public by design: your creator page (handle, display name, bio, avatar, and funding totals) and the names and messages supporters choose to show. Do not put anything private in those fields.
6. Cookies
We use a session cookie to keep you signed in. We do not use third-party advertising cookies.
7. Data retention
We keep your data while your account is active. On account closure or on request we delete or anonymize it, except where we must retain records for legal, tax, or fraud-prevention reasons.
8. Security
We use reasonable measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your rights
You can access, correct, or delete your personal data, and request a copy of it. Contact us and we will respond within a reasonable time. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.
10. Children
BuyMeTokens is not intended for anyone under 18, and we do not knowingly collect data from children.
11. International transfers
Your data may be processed in countries other than your own, including by the providers listed above. We rely on appropriate safeguards where required.
12. Changes to this policy
We may update this policy. Material changes are reflected by the “Last updated” date above; continued use after a change means you accept it.
13. Contact
Questions about privacy can be sent to privacy@buymetokens.net.
