Privacy

What After Dark holds about a member and a buyer, why it holds it, and the things it deliberately never keeps.

This covers the marketing site, the merchant admin, and every member site. The membership deal is on terms and the selling rules are on seller rules.

No tracking

There is no analytics package, no third-party tracker, and no advertising pixel on this site, in the admin, or on a member's page.
Nothing here builds a profile of a visitor or follows one between sites.

Signing in uses X. After Dark keeps the X account's stable identifier, its handle, its display name, and its avatar address, because those are what a member's page is built from.
The access and refresh tokens X issues are used once, to read the account's own identity, and then discarded. After Dark cannot act as a member on X.
Connecting X costs nothing and reads nothing beyond that identity.

When a member funds their account, After Dark reads their own public X account to build their page: the profile, their recent posts, and a bounded sample of the accounts they follow.
What the page says a member writes about comes from X's own annotations on their posts. After Dark does not infer a subject X did not attach.
Only public data is read. Nothing private, and nobody else's account.
A member can pay to have that read done again, and can leave it as it is.

For a funded member, After Dark subscribes to their public X events so a new post reaches their page without waiting for another read.
Private events are never subscribed to.
When a membership lapses, that subscription is released.

A buyer identifies themselves with an email address and a link sent to it. There is no password, so there is none to leak.
An order holds what an order needs: what was bought, what it cost, and where it ships if it ships.
A customer account belongs to the shop it was created on. It is not an After Dark membership and reaches nothing in the admin.

Payments happen on Solana, which is a public ledger. Wallet addresses, amounts, and transaction signatures are visible to anyone, by the nature of the chain and not by any choice made here.
After Dark records the wallet address a member proved, and the on-chain facts of each settled order, because that is what makes an order verifiable.
After Dark never holds a member's private key.

Email is transactional only: a sign-in link, an order receipt. There is no marketing list and no newsletter.
Sending is done by a third-party provider, which necessarily sees the address and the message.

A member can knock on another member's door once. After Dark sends a single direct message from its own X account naming who is looking for them.
After Dark carries no reply, no thread, and no message text beyond that one sentence, and never sends from a member's own account.
A member can switch paging off.

A signed session cookie keeps a member signed in to the admin. A short-lived cookie carries an X sign-in across the hop to X and back. A third proves to a member's own site that a visitor holds a membership.
All three are signed and unreadable to scripts. None of them is for advertising.
The edge caches public product and theme reads so a member's page loads quickly. Nothing signed in and no commerce write is ever cached.

A member can export their data from the admin without closing anything.
Closing an account stops renewals and takes the page offline. It does not destroy the member's orders, recycle their handle, or take unspent credits.
Orders are kept after closure because both sides of a completed sale need the record.