Liberapay
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
They say they collect little, don’t sell data, and don’t track visitors, but payment apps can still show names and emails.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
They collect what they need to run accounts, plus public social-account ids and cookies for login.
Read the exact line
Privacy policy
“we strive to collect only the personal information we actually need, and we don't sell it to anyone.”
Training
Linked social accounts are used to prove you are not an impostor and to help patrons find you.
Read the exact line
Privacy policy
“The primary purpose of these integrations is to confirm that a Liberapay account hasn't been created by an impostor attempting to profit from someone's else work.”
Sharing
They do not tell creators who patrons are, but PayPal can show names and emails.
Read the exact line
Privacy policy
“Liberapay does not tell creators who their patrons are. However, PayPal allows the recipient of a payment to see the name and email address of the payer”
Kept
The documents do not say how long they keep your data.
Read the exact line
Privacy policy
“we strive to collect only the personal information we actually need, and we don't sell it to anyone.”
Controls
You can avoid PayPal if you do not want your name and email shown to the other party.
Read the exact line
Privacy policy
“so donors who don't want to reveal themselves should not choose PayPal as the payment method.”
Fine print
The privacy page has no date, no account-closure rules, and no payment-refund terms.
Read the exact line
Privacy policy
“We do our best to protect everyone's privacy: we do not attempt to track people who visit our website”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Avoid PayPal if you want to stay as a donor
Choose a payment method other than PayPal on Liberapay payment pages
Read Stripe and PayPal privacy pages
Linked from Liberapay’s privacy page under Payment processors
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you pay with PayPal, the creator can see your name and email even though Liberapay itself hides patrons.
Read the exact line
Privacy policy
“PayPal allows the recipient of a payment to see the name and email address of the payer, so donors who don't want to reveal themselves should not choose PayPal as the payment method.”
For example, if you donate with PayPal, the person you support can learn your email.
Using Stripe or PayPal can leak a creator’s phone, name, or email unless they set those accounts carefully.
Read the exact line
Privacy policy
“Stripe may expose the recipient's phone number, so creators who do not want to reveal their identities should not use these payment processors”
For example, a creator’s personal phone number might show up to a donor through Stripe.
Linking GitHub or similar stores that platform’s public id on Liberapay.
Read the exact line
Privacy policy
“When an account from one of those platforms is connected to a Liberapay profile, we retrieve and store some data from that platform, for example the unique identifier of the linked account.”
For example, connecting GitHub stores your GitHub account id with them.
Stripe or PayPal may put their own cookies on payment pages.
Read the exact line
Privacy policy
“On some payment pages, extra cookies may be set by the payment processor.”
For example, paying with Stripe can add Stripe cookies in your browser.
Cloudflare, which helps run the site, can set cookies on visitors.
Read the exact line
Privacy policy
“Visitors of the liberapay.com website can also receive cookies sent by Cloudflare.”
For example, just opening the site can store a Cloudflare cookie.
They say they do not track visitors and do not sell personal information.
Read the exact line
Privacy policy
“we do not attempt to track people who visit our website, we strive to collect only the personal information we actually need, and we don't sell it to anyone.”
For example, they say they will not sell your email to advertisers.
Their own cookies are only for login and needed tasks, not for following you around.
Read the exact line
Privacy policy
“The liberapay.com website only sets technical cookies which are required to authenticate the user or to perform a specific operation.”
For example, a cookie keeps you logged in rather than tracking ads.
Traffic to the site is encrypted, with a small exception inside their data center.
Read the exact line
Privacy policy
“All network connections are encrypted, except for some communications between machines located in the same datacenter.”
For example, your browser connection to Liberapay uses encryption.
They encrypt stored identity details so a leak is less useful to thieves.
Read the exact line
Privacy policy
“As a precaution against identity theft in case of data leak, the identity information of Liberapay account owners is stored encrypted in our database.”
For example, if their database is stolen, your identity fields are encrypted.
Linked social accounts only store public info, not private messages or secrets.
Read the exact line
Privacy policy
“We only keep public information about the linked account, no private data.”
For example, they keep a public GitHub id, not your private GitHub emails.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
How we got here · grade C · score 40/100 · 13 of 15 policy answers backed by a verified quote · 9 not stated
What does the app collect beyond what it needs to work?
They collect account details they say they need, technical cookies, Cloudflare cookies, and public ids from linked social accounts.
Does it record your voice, face or body, and what happens to that?
The privacy page does not describe recording voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They say they do not try to track visitors and only set technical cookies; payment and Cloudflare cookies may still appear.
Do they sell or share your data, and can you opt out?
They say they do not sell data. Money and some cookies go through Stripe, PayPal, and Cloudflare, and PayPal can show names and emails.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say connections are encrypted and account identity details are stored encrypted.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy page we could read has no date and does not say how they will tell you about changes.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 487 words at a college level (Flesch reading ease 42.7).
