MightyDex is a small personal storefront. This page describes what information is collected and how it is used.

What we collect

When you purchase a piece we collect your name, email address, and billing details necessary to complete the transaction. Payments are processed by Stripe; your card number is never stored on our servers.

When you request a commission we collect the name, email, subject, description, budget range, optional deadline, and any reference images you choose to upload. This information is used solely to discuss and fulfill your commission.

How we use it

Your email may be used to send receipts, commission quotes, delivery notifications, and replies to your inquiries. We do not sell or share your information with third parties beyond what is required to complete your order (Stripe for payments, Resend for transactional email, Cloudflare for content hosting).

Accounts and sessions

If you create a member account we store your display name, email address, and password. Passwords are never stored in plain text. Signing in sets a session cookie in your browser; sessions expire on their own after long inactivity, and you can end one any time by signing out. If you sign in with Google or Discord, that provider shares profile details such as your display name, email address, and avatar plus the account and authorization details needed to sign you in, and we store those to keep the sign-in working. Your provider password never reaches MightyDex.

Age verification

Membership involves 18+ community content, so joining requires a one-time age check. The check is performed entirely by Stripe, on Stripe's own pages, using a government-ID document. MightyDex never receives or stores your ID documents, photos, date of birth, legal name, or address. What we store is only the result: whether the check passed, a reference to the Stripe verification session, its status, timestamps, and how many attempts were made. The check we run is a document check — no selfie or biometric comparison is enabled. After the decision — and again if you delete your account — we ask Stripe to redact the verification data on their side; Stripe carries that out on its own schedule. If you have questions or requests about that data, email us and we'll raise it with Stripe.

Membership billing

Member subscriptions are billed by Stripe. Stripe stores your card and billing details; MightyDex stores your subscription's status, tier, and paid-through date — never your card number, not even the last digits. Receipts and invoices come from Stripe.

Member pages

If you claim a member page, the things you put on it are public: your handle, display name, bio, avatar, links, accent color, and — if you opt in — a supporter star. The page shows a visit counter that counts page loads, not identified people. You can hide your page or opt it out of search engines at any time from the editor. Handles are permanent: once claimed, a handle is never reassigned to anyone else, and if you delete your account it is retired rather than recycled.

Email we send

We use Resend to deliver the email the site needs to function: account confirmations, password resets, receipts and billing notices, membership updates, and replies to things you send us. No marketing lists.

How we measure that membership is working

While a paid membership is active, we make a small first-party note when the account uses it: that it read a members-only post, or edited or shared its member page. Each note holds only a reference to the account, which kind of event it was, an opaque internal reference to the thing involved, and when it happened — never your IP address, browser details, the page URL or its query string, where a profile link points, the post's contents, or anything from your ID check. These notes feed one number on our own admin dashboard: how many paying members used their membership in the last 30 days. Nothing is shared or sold, and no third-party analytics are involved. If you delete your account, the notes are cut loose from it and can no longer count toward — or be tied back to — any current account.

Backups and deletion

We keep routine off-site backups so the site can recover from disaster. When you delete your account, we delete your sign-in, sessions, profile page, comments and likes, and our record of your ID check, and those removals age out of backups as they cycle. Two kinds of records are kept: your handle stays permanently retired so it can never point at someone else, and the minimum billing, commission, and project records are kept for bookkeeping — detached from any sign-in, with anything you wrote in them shown under a generic deleted-account name instead of yours. Payment records held by Stripe remain with Stripe.

Contact

Questions about any of this: [email protected].