Privacy

The short version

We collect what running the platform needs, we say what that is, and we don’t sell it. Where we could have built something invasive and didn’t, that’s written down below rather than left to trust.

What we collect

• Account basics. Your email address, and whatever you choose to put on your profile.
• Date of birth. Asked once, at email signup or in Settings. It keeps under-13s off the platform and decides whether 18+ verification is even possible for the account. It is never shown to other users.
• What you do here. Experiences you join, skills and practice you log, portfolios, messages, tickets and orders.
• Payment details are handled by Stripe. Card numbers never reach us.

Website analytics

We count visits to our public pages. What is recorded is a daily total per page, the referring website’s domain, any campaign tag on the link you followed, a country, a coarse device type, and whether the visit was somebody’s first.

What is notrecorded: your IP address, your browser’s user-agent string, any cookie or visitor identifier, or a row that represents you. Page addresses are stripped in your browser before anything is sent, so a username in a profile URL never leaves your device. “First visit or not” is a yes/no your browser reports about itself — there is no identifier behind it, which means we can see how many people return and cannot see whether you did.

We do not use advertising trackers, and there is no third-party analytics script on the site.

Email measurement

Marketing email — the newsletter and announcements you opted into — records whether you opened it and which links you clicked, per recipient. This is disclosed in the sentence you agree to when you subscribe, and it stops the moment you unsubscribe. Service email (receipts, tickets, password resets, safety notices) is sent from a separate domain and is not measured this way.

Why we collect it

To run the platform, keep it safe, handle payments, and understand whether what we make is worth making.

Service providers

Hosting and delivery (Vercel), database and authentication (Supabase), payments, payouts and identity verification (Stripe), and email (Resend). Each receives only what its job needs.

Age verification

The 18+ areas of Arsclepius open only after an identity check, which we use Stripe Identity for. Stripe collects your name, images of your identity document, facial images, and information about the device used, uses them to verify you and to detect fraud, and shares the result with us. What lands in our database is a yes or no and the date it happened. We never receive or store your document, your photos, or the birth date printed on your ID.

You can ask us to delete your verification data at any time. We then redact the verification on Stripe’s side as well; Stripe keeps only what its own legal obligations require. Stripe’s privacy policy is at stripe.com/privacy.

Data sharing

We don’t sell your data. If Arsclepius introduces data-sharing features, it will be opt-in.

Your control

• Profile visibility and who can message you: Settings → Privacy.
• Which email and notifications you get: Settings → Notifications.
• Marketing email: unsubscribe from any message, no login needed.
• Pause or close your account: Settings → Account. Closing anonymises your profile and cannot be undone.