This policy describes how the service at subclub.curious.nyc (“SubClub”, the “Club”, “we”) handles personal data. It applies to applicants and Members alike.
Your Google profile. Signing in with Google gives us your name, email address, and profile picture. We never see or store a password.
Payment references. Payments are processed by Stripe; full card numbers never reach us. We store your Stripe customer ID, a reference to your saved payment method, and your card’s brand and last four digits so you can recognise it.
Your ledger. An append-only record of every credit to and deduction from your balance: amount, date, type, and a short description.
Member activity. Records of the selections and preferences you register while using member-only features, and the status of your membership.
One cookie. A single signed session cookie keeps you signed in. There are no advertising or third-party analytics trackers on this site.
To run your account and the Club’s books: authenticating you, deciding on applications, deducting monthly dues, processing payments and auto-pay charges, maintaining the ledger, and contacting you about your membership. Nothing else.
Only the processors needed to operate the service: Google (sign-in), Stripe (payments), Vercel (hosting), and Neon (database hosting). Each receives only what its role requires.
We do not sell personal data, share it with advertisers, or disclose Member identities to anyone, except where the law compels us.
Account data is kept while your application or membership is live. Financial records (the ledger and payment references) are retained after an account closes, for bookkeeping. If your account is deleted, your profile is removed.
From your dashboard you can turn off auto-pay and remove your saved card at any time. For access to, correction of, or deletion of your data, contact the Club administrator through the channel you already use to reach them.
All traffic is encrypted in transit. We hold no card numbers and none of your passwords; the shared vault’s own access details are stored encrypted (AES-256-GCM) and shown only to eligible Members. The rest of the data we hold lives with the processors named above, not on our own machines.
This site asks search engines not to index it, and its public pages say nothing about the Club. We extend Members the discretion we ask of them.
The service is for adults. You must be 18 or older to apply.
We may update this policy; the effective date above reflects the latest version. Questions go to the Club administrator, through the channel you already use to reach them.