Last updated October 24, 2026. Effective upon publication on thecardboardgang.com.

Privacy Policy

Cardboard Gang is operated by CJH Enterprises LLC. References to Cardboard Gang, we, us or our mean CJH Enterprises LLC operating Cardboard Gang. This policy explains how we handle information for website sign-in, membership billing, Discord access and support. Contact [email protected] with privacy questions.

Information used for membership

When you sign in with Discord, we receive your Discord user ID, username and display name. We use your Discord ID to associate your account with membership eligibility and server-rule acceptance. Membership records include Stripe customer and subscription identifiers, plan, subscription status, relevant billing dates and synchronization records. These identifiers are not your full payment card details.

Stripe collects membership payment and billing information through its hosted pages. Cardboard Gang uses membership and transaction records to verify access, manage billing and investigate errors. Stripe processes payment information under its own privacy policy.

Cookies and Discord authorization

We use essential cookies to complete Discord sign-in, prevent request forgery and keep you signed in. Sign-in sessions are encrypted and expire after about one hour. Ordinary member sessions do not retain Discord OAuth access tokens. Staff sign-in separately requests permission to read server membership so we can verify Staff or Owner roles; its encrypted authorization cookie lasts no more than 30 minutes. Signing out clears the website’s sign-in cookies.

Discord handles your Discord login under its own privacy policy. Connecting Discord does not automatically join you to the server.

How information is used

We use membership information to authenticate accounts, verify the selected tier and payment eligibility, record rule acceptance, synchronize Discord access, prevent duplicate billing operations, protect the service and respond to support requests. You can contact support without sending account passwords, full card numbers, card security codes or recovery codes.

Service providers and access

Cloudflare hosts the website, API and membership database. Railway hosts Cardboardy services used for Discord integration and service notifications. Stripe processes membership billing, Discord provides sign-in and server access, and Google handles messages sent to our support email. These providers may process technical information such as IP addresses, request metadata and security logs under their own policies. Authorized staff may handle information needed to resolve support and access issues.

Separate submission system

The membership database is separate from the retailer submission system. Membership verification does not require retailer passwords or retailer payment profiles. If retailer submissions are made available, their data categories, purposes, staff access, security handling and retention must be disclosed before collection. Do not treat Stripe’s handling of membership payments as a statement about a separate retailer submission form.

Retention and security

We retain membership, consent, transaction and security records as needed to provide the service, resolve disputes, prevent abuse and satisfy applicable recordkeeping obligations. The service uses encrypted session cookies, restricted server credentials and access checks. No online service can guarantee complete security. Report suspected exposure promptly without sending the affected credentials by email.

Requests and choices

You can sign out, stop using Discord sign-in and cancel future membership renewal through Manage membership. Email [email protected] to request access to, correction of or deletion of personal information. We may verify your identity and retain records where needed for legal, security or dispute purposes. Deleting information or disconnecting Discord does not by itself cancel a Stripe subscription; use the cancellation process to stop renewal.

Policy changes

We will update this page when our described practices change and provide additional notice where required. Contact our support email if anything here is unclear.