Privacy Policy.

The data controller is Whopclub, operated from Strasbourg, France (legal entity in registration; this page will be updated with its details once incorporation completes). For anything privacy-related, write to hello@whopclub.com.

Whop processes your payments and your Whop account as an independent controller under Whop's own privacy policy.

• Whop sign-in data. When you log in with Whop we receive your Whop user id, username, name, email and avatar. We use it to run your account (legal basis: contract).
• Your Whopclub profile. The fields you fill in yourself: city, first and last name, email, phone, social handles and interests. Used to show you relevant clubs and events (legal basis: contract). All fields are optional.
• Email lists. The email you give us to join a waitlist, follow a city, or get reminders for an event. Used only for what you signed up for — a launch notification, an event reminder the day before, a follow-up with the next date (legal basis: consent). Every email carries a one-click unsubscribe link.
• Anonymous page statistics. Which listing pages are viewed and which buy buttons are clicked, tied to a random visitor id, never to your name or account (legal basis: legitimate interest in measuring our own audience). Details in section 4.
• Purchase records. When you buy through Whop checkout, Whop notifies us of the sale (buyer reference, amount, and which page led to it) so we can pay organizers, keep books and detect fraud (legal basis: contract and legal obligation).

That is the whole list. We do not collect precise location, we do not read your contacts, and we never buy or sell personal data.

• whop_session (30 days): keeps you signed in. Cryptographically signed, essential.
• whop_oauth (a few minutes): protects the sign-in handshake against forgery, then disappears.
• wc_vid (12 months): a random identifier for the anonymous audience measurement described below.
• Local storage: your theme choice and a draft of your profile stay in your own browser and are never sent anywhere except, for the profile, to your own account when you save it.

There are no advertising or third-party cookies, which is why you see no cookie banner: everything above is either strictly necessary or exempt audience measurement under CNIL guidelines.

Our analytics are built in-house and first-party, designed to fit the CNIL exemption for audience measurement: they serve only to produce aggregate statistics about our own pages, the visitor id is random and cross-referenced with nothing else, no data is shared with third parties, there is no cross-site tracking, the cookie lives at most 12 months, and raw records are deleted after 25 months.

Concretely we store: "a visitor viewed the page for event X" and "a visitor clicked the buy button for club Y". Not who, not from where, not an IP address.

• Vercel Inc. (United States): hosts the site and its server code.
• Neon Inc. (database on AWS): stores accounts, profiles, waitlist entries and statistics.
• Whop (United States): sign-in and payments, as its own controller.
• Resend Inc. (United States): delivers the emails you asked for — confirmations, event reminders and follow-ups.

Transfers outside the EU are covered by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as applicable to each provider.

• Sign-in session: 30 days, then you log in again.
• Account and profile: for as long as your account exists, deleted on request.
• Email lists: until you unsubscribe — one click at the bottom of any email, or a note to hello@whopclub.com. Waitlist entries also go once the feature launches and you have been notified.
• Raw audience statistics: 25 months, then deleted automatically.
• Purchase records: 10 years, as French accounting law requires for commercial records.

Under the GDPR you can ask for access, rectification, erasure, portability, restriction, and you can object to processing based on legitimate interest. One email to hello@whopclub.com does it; we answer within one month. You can also complain to the French supervisory authority, the CNIL (cnil.fr), or to your own country's authority.

For data held by Whop (payment details, Whop account), exercise your rights with Whop directly; we will point you in the right direction if you ask us.

Whopclub is for adults: the service is not directed at anyone under 18, and we do not knowingly collect children's data. We make no automated decisions with legal effects about you and we do no profiling beyond the aggregate statistics described above. If our practices change, this page changes first, with a new date at the top; see also our Terms of Service.