Liberapay
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
They say they collect little, do not track visitors, and do not sell data; payment processors may still see names and emails.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and payment details, technical cookies, and public info from linked social accounts.
Read the exact line
Privacy policy
“we strive to collect only the personal information we actually need, and we don't sell it to anyone.”
Training
They use linked social accounts to check you are not an impostor and to help patrons find creators.
Read the exact line
Privacy policy
“The primary purpose of these integrations is to confirm that a Liberapay account hasn't been created by an impostor attempting to profit from someone's else work.”
Sharing
They say they do not sell data; Stripe, PayPal, and Cloudflare may still see payment or cookie data.
Read the exact line
Privacy policy
“Liberapay does not tell creators who their patrons are. However, PayPal allows the recipient of a payment to see the name and email address of the payer”
Kept
The documents do not say how long they keep your information.
Read the exact line
Privacy policy
“As a precaution against identity theft in case of data leak, the identity information of Liberapay account owners is stored encrypted in our database.”
Controls
They do not describe in-app deletion, training toggles, or other privacy switches.
Read the exact line
Privacy policy
“donors who don't want to reveal themselves should not choose PayPal as the payment method.”
Fine print
There is no terms document here about lawsuits, account closure, refunds, or policy dates.
Read the exact line
Privacy policy
“We do our best to protect everyone's privacy: we do not attempt to track people who visit our website”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Avoid PayPal if you want to stay as a donor
Privacy page, Personal information leaks
Creators: configure Stripe/PayPal with a business name and dedicated contacts
Privacy page, Personal information leaks
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Even if Liberapay hides who donates, PayPal can still show your name and email to the creator.
Read the exact line
Privacy policy
“PayPal allows the recipient of a payment to see the name and email address of the payer, so donors who don't want to reveal themselves should not choose PayPal as the payment method.”
For example, if you donate with PayPal, the person you support may see your real name and email.
Payment companies can leak a creator’s phone or name unless they set up a business identity.
Read the exact line
Privacy policy
“Stripe may expose the recipient's phone number, so creators who do not want to reveal their identities should not use these payment processors”
For example, a donor using Stripe might see the creator’s personal phone number.
Linking GitHub or Twitter stores that platform’s public ID with your Liberapay profile.
Read the exact line
Privacy policy
“When an account from one of those platforms is connected to a Liberapay profile, we retrieve and store some data from that platform, for example the unique identifier of the linked account.”
For example, connecting GitHub stores your GitHub user id so they can check you are not impersonating someone.
A third-party CDN can put cookies on your browser when you visit the site.
Read the exact line
Privacy policy
“Visitors of the liberapay.com website can also receive cookies sent by Cloudflare.”
For example, Cloudflare may set its own cookies even if Liberapay only wants login cookies.
Stripe or PayPal can set extra cookies when you pay.
Read the exact line
Privacy policy
“On some payment pages, extra cookies may be set by the payment processor.”
For example, opening a Stripe checkout page can add Stripe cookies on your device.
They say they avoid tracking visitors, collect little, and do not sell personal data.
Read the exact line
Privacy policy
“we do not attempt to track people who visit our website, we strive to collect only the personal information we actually need, and we don't sell it to anyone.”
For example, they claim they will not sell a list of donors to advertisers.
Their own cookies are for login and needed tasks, not for ads.
Read the exact line
Privacy policy
“The liberapay.com website only sets technical cookies which are required to authenticate the user or to perform a specific operation.”
For example, a cookie keeps you logged in instead of tracking you across other sites.
They encrypt identity fields so a stolen database is harder to misuse.
Read the exact line
Privacy policy
“As a precaution against identity theft in case of data leak, the identity information of Liberapay account owners is stored encrypted in our database.”
For example, if someone copies the database, names may still be encrypted.
Traffic to the website is encrypted; some internal server traffic is not.
Read the exact line
Privacy policy
“All network connections are encrypted, except for some communications between machines located in the same datacenter.”
For example, your browser uses HTTPS, but two servers in one data center may talk without encryption.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
How we got here · grade C · score 44/100 · 15 of 15 policy answers backed by a verified quote · 9 not stated
What does the app collect beyond what it needs to work?
They collect what they need for accounts and payments, technical cookies, Cloudflare cookies, and public IDs from linked social accounts.
Does it record your voice, face or body, and what happens to that?
Nothing in the privacy page says they record voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They say they do not try to track visitors; cookies are technical, though Cloudflare and payment processors may set cookies.
Do they sell or share your data, and can you opt out?
They say they do not sell data. Money and some identity details go through Stripe and PayPal, who can show names and emails.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe HTTPS and encrypted identity fields in the database; no audit or leak history is given.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy page has no date and does not say how they will tell you about changes.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 487 words at a college level (Flesch reading ease 42.7).
