Your data, kept to a minimum.

Kas D’atay is a Byesar project for Digital Faith Foundation. For anything about your data, email webmaster@kasdatay.com.

• Waitlist: name, email, country, link to your work, audience size. To contact you about joining Kas D’atay. Lawful basis: Steps you ask us to take before an agreement.
• Help and correction requests: topic, message, email, the page you were on. To answer you and fix mistakes. Lawful basis: Legitimate interests.
• Creator account: email, page name, photo (optional), bio, links, goal, country, currency. To run your account and show your public page. Lawful basis: Contract.
• Wording preference (optional): whether you’d like faith-inspired wording in suggestions. To shape the wording our assistant suggests. It is a choice about the service, not a record of your beliefs, and you can change or clear it any time. Lawful basis: Consent.
• Stripe account ID, its business or dashboard name, whether it can take payments, every Stripe account each of your pages has used, and which account each payment was made on. To send payments to the right account, show you which account your payouts go to (one account can serve several of your pages), record payments that reach an account a page used before, and send refunds and changes to the right account. Lawful basis: Contract.
• Supporter name, message and privacy choices (optional). Shown to the creator, and on the creator’s public page unless you keep your name and message off it or make your message private to the creator. Lawful basis: Consent.
• AI assistant approval requests: your email and an approximate country taken from the request, plus scrambled (hashed) codes. To let you approve, or refuse, an AI assistant that asked for a setup key for your account. The email and country are emptied when the request ends and the request is deleted within a day. Lawful basis: Legitimate interests.
• Moving your page here: when you ask, we read your own public GitHub profile once (or tidy the text you paste from another platform), and keep a small note of the platform, your username there and whether you showed the page is yours. To fill in your new page with your own words, and so the person who reviews your page can see it was brought over. We never read or keep anyone else’s data from those sites, and never your supporters’. Lawful basis: Contract.
• Spread the word: your name and your friends’ emails. Used once to send your message, then discarded. We keep only a scrambled (hashed) record of your IP address for up to two days, to stop misuse. Lawful basis: Legitimate interests.
• Supporter email, amount and date (from Stripe Checkout). To send you a receipt and the creator’s thank-you, and so creators can see and thank who supported them. Lawful basis: Legitimate interests.
• Page reports: reason, details, optional email. To review content. Lawful basis: Legitimate interests.
• Supporters who tick “Email me updates”: your email and name, for that creator. To send you that creator’s posts. Stop them from the link in any of those emails. Lawful basis: Consent.
• Creator emails: which setup steps you’ve done, and your support totals. To send emails about your account, and tips, milestones and a monthly recap (switch these off in Settings or from any of them). Lawful basis: Contract (account emails); legitimate interests (tips).

We never receive or store card numbers. Stripe handles payment details under its own privacy policy.

If a creator thanks you with a voice note or video, we store it privately and send you a private link to it. It isn’t shown publicly, and it’s deleted when the creator deletes their account.

• Stripe: payments and creator identity checks.
• Supabase: database and sign-in, hosted in Frankfurt (EU).
• Netlify: website hosting and form storage.
• Google (only if you choose Continue with Google): confirms your name and email address when you sign in with Google; we don’t get your Google password or anything else from your account.
• IONOS: sending our emails: sign-in codes, account emails, receipts, tips and updates.
• AI providers (currently Google Gemini): optional AI suggestions, drafts and message checks. They receive only the text needed for each request (for example your page wording, or a supporter’s message without their name or email), and never card details.

Some of these services may process data outside the UK and EU, under the safeguards the law requires. We never sell your data.

If a creator you support has set up a webhook, the details of your support that they can already see (your name, email, amount and message) are also sent to a web address they choose. The creator is responsible for how they use it there.

Waitlist and help requests: until launch plus 12 months, or sooner if you ask. Account data: while your account is open. Payment records: 6 years, for accounting.

You can ask to see, correct or delete your data, to limit or object to how we use it, or to get a copy. Where we rely on your consent, you can withdraw it at any time. Email webmaster@kasdatay.com. You can also complain to the Information Commissioner’s Office (ico.org.uk).

We use a sign-in cookie to keep you signed in, and a cookie that remembers the theme you choose. If you’re a member of a creator, a cookie on that device remembers your membership so you can read members-only posts; if you arrive through a creator’s invite link, a cookie remembers who invited you for 30 days. Creators’ browsers also store a small note so the “new kas” celebration only shows once. If you accept, we use Google Analytics to understand how people find and use the site, which sets analytics cookies; if you choose “No thanks”, it doesn’t load. You can change your choice with “Cookie choices” at the bottom of any page. We don’t use advertising cookies.

Draft policy, pending legal review. Last updated 26 September 2026.