Privacy Policy
2THEWOLF respects your privacy and is committed to protecting it. This Privacy Policy explains how information is collected, used, stored, safeguarded, and disclosed when you access or use the platform.
1. Information We Collect
1.1 Account Information. When you create an account, we collect limited personal information necessary to operate the platform, including your email address, chosen handle, and account status information.
1.2 Authentication Data. Passwords are never stored in plain text and are securely hashed. Multi-factor authentication credentials are encrypted and processed using secure cryptographic standards.
1.3 Technical & Log Data. We collect technical information required for authentication, fraud prevention, and system integrity. This may include IP address, last known IP address, device type, browser type, device fingerprint, timestamps, access logs, and related security signals.
1.4 Financial Transaction Data. We maintain internal ledger records of WolfCoin purchases, transfers, redemptions, membership payments, refunds, disputes, and related transaction activity.
1.5 Membership Lifecycle Data. We maintain membership type, billing interval, membership start and paid-through timestamps, renewal and retry schedules, cancellation and recovery status, requested transitions, Applicant Verification state, account-level changes, payment-attempt status, notification intent, promotion eligibility and redemption, permanent Founder-recognition tier and position, certificate or badge-delivery intent, and the audit evidence required to apply and verify membership rules.
1.6 Consent & Acknowledgement Records. We record affirmative authorizations and acknowledgements associated with recurring off-session membership payments, saved payment methods, Annual 360-day terms, Annual upgrade restrictions, scheduled or immediate membership transitions, and other material transaction terms.
1.7 Aggregate Visitor Counter. To operate the public site visitor counter, 2THEWOLF uses a strictly first-party cookie containing a random, HMAC-protected browser identifier for up to 365 days. Its only purpose is to determine whether that browser has already been included in the aggregate visitor total. The database stores only a SHA-256 hash of the random identifier and the timestamp when it was first successfully counted. The counter does not store the raw identifier, IP address, User-Agent, browser or device characteristics, account or user ID, page or referring URL, last-seen timestamp, or visit, session, or navigation history. It is not used for advertising targeting, behavioral profiling, cross-site tracking, account association, user identification, fingerprinting, or marketing attribution.
2. Applicant Verification & Compliance
Creator and Commercial membership applicants must complete the unified Applicant Verification process before payment for an approved upgrade. Applications require an authenticated account with a verified email.
Creator verification uses government-issued photo identification. Commercial verification uses government-issued business evidence and evidence reasonably establishing the authorized representative's identity and association with the applying business. Both branches use a private Discord webcam session. No video, audio, screenshot, or recording becomes part of the permanent application record.
If required by law, tax reporting forms (including IRS Form 1099 where applicable) may be issued.
Verification and tax-related evidence is collected solely for identity and business verification, fraud prevention, regulatory reporting, and enforcement of contractual obligations. An Applicant Verification PIN is retained as a permanent administrative record discriminator and is never used as a login, recovery, two-factor, or payment credential.
Permanent application records may include the submitted applicant or business information, public links, selected application time zone, status, applicant-visible findings, administrative decision, review timestamps, reviewer and access-audit evidence, approval expiration or void status, payment-attempt evidence, and resulting membership action. Private Administrative Notes remain internal. Temporary verification evidence is restricted to authorized Administrators and Developers during the active review and is never made public.
3. Accounts Featuring Minor Performers
The platform does not contract with minors.
Where a creator account features a minor performer, identity and documentation are collected from the legally competent adult or qualifying business entity controlling the account.
The platform does not knowingly collect personal information directly from minors for account registration or contractual purposes.
4. Payment Processing
Membership transactions are processed through Stripe. Payment details entered through Stripe-hosted payment fields are transmitted directly to Stripe. 2THEWOLF does not store full payment card numbers, card security codes, or raw card credentials.
2THEWOLF may store the opaque Stripe Customer ID and PaymentMethod ID, limited display metadata such as card brand, last four digits, and expiration month and year, PaymentIntent and charge references, payment status and amount, currency, timestamps, receipts, consent evidence, and records showing whether a PaymentMethod is usable, replaced, or revoked. Client secrets, full card numbers, and card security codes are not stored in 2THEWOLF membership records.
When a member expressly authorizes future off-session membership charges, Stripe stores the approved PaymentMethod and 2THEWOLF retains the associated authorization record. Membership consent does not authorize WolfCoin, store, or another payment domain to charge that PaymentMethod. Each separate payment purpose must have its own applicable authority and consent.
Fraud monitoring, payment verification, refunds, formal payment disputes, chargeback investigation, and reconciliation may involve limited sharing of transaction, account, device, and security data with Stripe, financial institutions, card networks, identity-verification providers, and authorized administrators as necessary for the specific transaction or review.
5. How Information Is Used
- Create and manage user and creator accounts
- Authenticate users and secure platform access
- Support fraud detection and risk management
- Initiate and reconcile authorized membership payments
- Apply membership terms, renewals, retries, transitions, cancellations, and recovery
- Record recurring-payment consent and material transaction acknowledgements
- Apply membership promotions and preserve permanent Founder recognition
- Generate or display the applicable numbered Founder certificate or badge
- Process Creator and Commercial Applicant Verification, approval, rejection, and membership continuation
- Queue and deliver essential membership and payment notices
- Investigate and administer payment disputes
- Process WolfCoin transactions and redemptions
- Comply with legal and regulatory obligations
- Enforce Terms of Service and WolfCoin Rules
- Send essential system and security communications
6. Fraud Prevention & Security Monitoring
The platform maintains internal logging and monitoring systems designed to detect unauthorized access, suspicious payment activity, payment replay or duplication, attempted registration evasion, and abuse of membership or WolfCoin transactions.
If fraudulent or unauthorized activity is confirmed, account restrictions, transaction reversals, and enforcement measures may occur in accordance with the Terms of Service and WolfCoin Rules.
If a payment dispute is finally resolved in favor of the cardholder, the associated account may be permanently restricted from future paid membership participation. To identify attempted re-registration, the platform may compare email address, account handle, last known IP address, and device fingerprint with records associated with the restricted account. A single matching identifier is not sufficient for automatic rejection. Two or more matching identifiers may trigger an automatic rejection, subject to authorized administrative review of a claimed false positive.
7. Data Retention
Account and transaction data is retained as long as necessary to operate the platform, comply with legal obligations, resolve disputes, enforce agreements, and maintain fraud prevention safeguards.
Certain financial and tax-related records may be retained for regulatory compliance purposes.
Payment, membership, consent, refund, dispute, financial-ledger, tax, promotion-redemption, permanent Founder-recognition, audit, and notification-intent records may be retained after a membership ends or a PaymentMethod is replaced or revoked when needed to prevent duplicate charges, recover paid but incomplete fulfillment, demonstrate authorization, reconcile transactions, resolve disputes, comply with law, preserve financial history, and retain the permanent historical recognition attached to a qualifying account.
An account subject to a final cardholder-favorable dispute outcome is retained permanently for legal, financial, fraud-prevention, and audit purposes, including enforcement of the approved registration-protection rule. Submitted Applicant Verification identity and business evidence exists only for the active review and is permanently deleted before the administrative decision finalizes. It is excluded from backups, disaster-recovery archives, long-term storage, exports, and diagnostics. Permanent application, decision, applicant-visible findings, and audit records remain after the underlying evidence is deleted.
8. Data Sharing
2THEWOLF does not sell personal information.
Information may be shared with service providers strictly for operational purposes such as payment processing, hosting, identity verification, security monitoring, and regulatory compliance.
Information may be disclosed where required by law, court order, arbitration proceeding, or regulatory authority.
In dispute resolution proceedings, disclosure shall be limited to information directly relevant to the specific claim in accordance with the dispute resolution provisions in the Terms of Service.
Stripe and participating financial institutions receive the payment and transaction information necessary to process authorized charges, authentication, refunds, and disputes. The issuing bank and card network determine the financial outcome of a formal card dispute. 2THEWOLF uses the authenticated outcome to apply the membership rule described in the Terms of Service.
9. Confidentiality & Dispute Proceedings
Dispute resolution proceedings are confidential except as required by law. Information disclosed in such proceedings shall be limited to the minimum necessary to address the individual claim.
Platform-wide data, proprietary economic structures, or unrelated user data shall not be disclosed except where legally compelled.
Payment-dispute evidence is limited to information reasonably necessary to investigate, respond to, document, and resolve the challenged transaction. Authorized administrators may review the evidence and authenticated processor outcome but may not alter the outcome determined by the issuing bank and card network.
10. Data Protection
Reasonable technical and organizational safeguards are used to protect user information, including encryption, access controls, and secure server infrastructure.
While no system can guarantee absolute security, data protection and risk mitigation are treated as core platform priorities.
Payment capabilities are separated by transaction domain. Membership payment authority does not itself grant WolfCoin, store, or another subsystem access to initiate a charge. Access to payment references, identity evidence, dispute records, and immutable financial evidence is limited according to operational role and purpose.
11. Platform Evolution
2THEWOLF operates in a staged rollout environment. Platform features, verification requirements, and data handling processes may evolve. Material changes will be reflected in updates to this Privacy Policy.
12. Policy Updates
This Privacy Policy may be updated periodically. Continued use of the platform after updates constitutes acceptance of the current version.
13. Contact
Questions regarding this Privacy Policy may be directed through official platform communication channels.