Privacy Policy

Last updated: 10/12/2026

Buy Me a Coffee is a platform for creators to accept support from their audience and share exclusive content. At Buy Me a Coffee, your privacy is important to us, and we want you to feel confident that your personal information is secure when using our products and our platform.

The services are provided by Publisherr Inc (parent company and hereinafter referred to as “Buy Me a Coffee”), a Delaware company with registered address at 2193 Fillmore Street, San Francisco, CA 94115, USA. It is Buy Me a Coffee’s policy to respect your privacy regarding any information we may collect while operating our website.

The short version

  • We collect what we need to run Buy Me a Coffee: your account details, payment and payout information, and how you use the service.
  • We never sell your personal data.
  • Creators can see some information about their supporters. Section 3 lists exactly what.
  • You can access, correct, export or delete your data. Section 8 explains how.
  • Questions: [email protected].

This policy is part of our Terms of Use. Cookies are covered in our Cookie Policy, and the rules about content and conduct are in our Community Guidelines.

1. Who we are and who this covers

The service is provided by Publisherr, Inc., 2193 Fillmore Street, San Francisco, CA 94115, USA ("Buy Me a Coffee", "we", "us"). This policy applies to creators, supporters and visitors to our website and apps.

For account, payment and safety data, we decide how your data is used. When a creator receives supporter details through the service, that creator is also responsible for protecting them, as described in Section 3.

2. What we collect and why

We collect only what we need.

Account information. Name, username, email address, password (stored encrypted), profile photo, bio and social links, so we can create and secure your account and show your page.

Supporter payments. Payment details go directly to Stripe. We receive a token, card type, expiry date and the last four digits, plus what you supported or bought, the amount and the date. We use this to process payments, show receipts and prevent fraud.

Creator payouts and verification. Legal name, country, date of birth, payout or bank account details, and tax information. Some of this goes directly to Stripe. We use it to pay you, verify identity and meet tax and financial rules.

Content and messages. Posts, comments, messages and files you upload or send, so we can provide the features you are using.

Support conversations. Emails and chats with our support team, including attachments, so we can help you and keep a record if you contact us again.

Device and usage information. IP address, browser and device type, pages viewed, links clicked and approximate location (city or country), used to keep the service secure, fix problems and understand what works.

From other services. If you sign in with Google, we receive your name, email address and profile photo with your permission.

3. What creators can see about supporters

The table below shows exactly what a creator can see about you.

InformationVisible to the creator
Name or display name you enteredYes
Email addressYes
Message you wroteYes
Amount and date of supportYes
Membership tierYes
Shipping addressOnly for items that need shipping
Full card numberNever
IP addressNever

Creators may use this only to deliver what you paid for and to communicate about it. They may not sell it, share it, use it for unrelated marketing, or contact you off-platform without consent. These rules are in Section 7 of our Terms of Use, and breaking them can lead to suspension.

4. What is public

Your profile, page, posts and comments are public. Supporter names and messages are shown on a creator's public page by default, and you can change this in your settings. We may publish aggregated statistics that cannot be linked to any individual.

5. Who we share your information with

We never sell your personal data. We share it only:

  • with Stripe, to process payments and payouts
  • with service providers who help us run the service, such as hosting, email, analytics, consent management and customer support, and who may use your data only to work for us
  • with creators, as set out in Section 3
  • for legal and safety reasons, to comply with a valid legal request or to investigate fraud, abuse or risks to safety. Where the law allows, we will tell you before we share your data.
  • in a sale or merger, in which case we will notify you before your data becomes subject to a different policy
  • as anonymous or aggregated data that cannot be linked to you

6. AI and automated decisions

ToolWhat it doesData usedHuman review
Fraud and risk scoringFlags accounts for possible fraud or policy violationsAccount activity, page contentYes, before any account closure or fund hold
Help centre assistantAnswers support questionsYour question textYes, escalated to a person on request

We do not use your personal data or content to train AI models, and the AI providers we work with are contractually barred from doing so.

If an automated tool contributes to a decision that significantly affects you, such as a fund hold or account closure, you can ask for a person to review it. Email [email protected] and someone who was not involved in the original decision will look at it again. This is the same appeals route described in Section 8 of our Terms of Use and Section 7 of our Community Guidelines.

7. Cookies

We use cookies and similar technologies to sign you in, remember your settings and understand how the service is used. You can change your preferences at any time on our Cookie Policy page, and we ask for consent before setting anything other than essential cookies if you are in the EU, UK or Switzerland. We honour Global Privacy Control, and we do not respond to Do Not Track. Full detail is in our Cookie Policy.

8. Your rights

Wherever you live, you can ask us to:

  • access a copy of the personal data we hold about you
  • correct anything inaccurate
  • delete your data, subject to Section 9
  • export your data in a common format
  • object to or restrict how we use it in certain cases
  • withdraw consent where we rely on it, such as marketing emails
  • complain to your local data protection authority

You can do most of this yourself in your settings. For anything else, email [email protected]. We will reply within 3 days and complete your request within 30 days, or 45 days if you are a California resident. If we need longer, we will tell you why. We may need to verify your identity first, and we will not treat you differently for using your rights. You can also appoint an authorised agent to make a request for you.

Deleting your account removes your public page. It does not cancel active memberships, so cancel those first to stop recurring payments.

9. How long we keep your data

DataRetention
Account information and contentWhile your account is active, then deleted within 60 days of closure
Payment and payout records15 years after the transaction (tax and accounting rules)
Identity verification records5 years after account closure
Support conversations5 years after the last message
Security and login logs6 months
Banned accountsDeleted 60 days after the ban, except records we must keep for fraud prevention or legal reasons
Analytics data24 months

Where we have to keep something longer for legal reasons, we keep only what is needed and use it only for that purpose.

10. Security

We encrypt data in transit and at rest, limit staff access to what is needed, and review our systems regularly. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

11. International transfers

We are based in the United States, and your data is processed there and in other countries where our providers operate. For transfers from the EU, UK and Switzerland we rely on Standard Contractual Clauses. Contact us if you would like more detail.

12. Age

You must be 18 or over to use Buy Me a Coffee. We do not knowingly collect data from children. If you believe a child has given us data, email [email protected] and we will delete it.

13. Changes and contact

If we make material changes we will tell you at least 30 days beforehand by email or a notice on the site, and update the date at the top.

Publisherr, Inc.

2193 Fillmore Street,

San Francisco, CA 94115

United States

Email: [email protected]

14. Why we are allowed to use your data (EU and UK)

If you are in the EU or UK, the law requires us to name a legal reason for each way we use your data. Here they are.

PurposeLegal basis
Providing the service, payments and payoutsPerformance of a contract
Fraud prevention, security, analytics and improving the serviceLegitimate interests
Tax, accounting, sanctions and identity checksLegal obligation
Marketing emails and optional cookiesConsent

Also see our California Privacy Notice.