Privacy Policy

Effective date: September 20, 2026

This Privacy Policy explains how LynxLynkr, operated by Coldwinterchills Designs LLC (“LynxLynkr,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects information when you use our website and services. It applies to visitors, account holders, membership users, Market users, and Merchandise Store customers.

Payment cards are entered directly with our payment processor, optional identity verification is handled by Stripe Identity, and merchandise delivery information is shared with Printful so it can produce and ship an order. The sections below explain these and our other information practices.

1. Information you provide

Depending on the services you use, we may collect information you provide directly, including:

• Account information such as username, email address, password hash, account role, and security or verification information.
• Profile information, preferences, biography, profile images, and other information you choose to provide.
• Posts, comments, reactions, images, group content, chat messages, private or instant messages, Market listings, reports, and other user content.
• Support requests, contact-form submissions, uploaded issue images, correspondence, and information supplied to resolve a report.
• Membership tier, billing term, membership status, start and expiration dates, and related account history.
• If you choose identity verification, your consent decision and limited verification records such as your internal account reference, Stripe verification-session identifier, status, attempt count, timestamps, and limited failure or redaction information.
• Merchandise order information such as name, email address, optional phone number, shipping address, selected products and variants, quantities, shipping method, and order notes or support information.
• Your acceptance of checkout policies, including the time of acceptance and the policy versions associated with an order.

2. Information collected automatically

When you visit or use LynxLynkr, we may automatically collect technical and activity information needed to operate and secure the service. This may include IP address, browser and device information, requested pages, referring page, date and time, login and session activity, feature use, error logs, security events, and actions associated with an account.

3. Cookies, local storage, and sessions

LynxLynkr may use cookies, session identifiers, browser local storage, and similar technologies to keep users signed in, preserve a merchandise bag, remember preferences, protect accounts, prevent abuse, and maintain website functionality. Disabling these technologies may prevent login, checkout, or other features from working correctly.

4. How we use information

We may use information to:

• Create, authenticate, maintain, and secure accounts and profiles.
• Provide feeds, posts, comments, groups, chat rooms, messaging, Market, memberships, and other community features.
• Display content according to applicable visibility and privacy settings.
• Calculate merchandise availability and shipping, process orders, send receipts and order updates, submit paid orders for fulfillment, and provide customer support.
• Process membership purchases and maintain membership access when paid memberships are available.
• Provide optional identity verification, activate or remove the verified-member badge, reduce impersonation and misuse, and respond to verification-related privacy requests.
• Moderate content, investigate reports, prevent fraud and abuse, enforce our policies, and protect users, LynxLynkr, and others.
• Maintain, troubleshoot, analyze, and improve performance, reliability, accessibility, and security.
• Comply with legal, tax, accounting, recordkeeping, and dispute-resolution obligations.

5. Public, community, and private content

Information intentionally posted to public or community areas may be visible to other users or visitors and may be copied or shared by them. Use care before placing personal information in posts, profiles, comments, groups, or Market listings.

Private or instant messages are intended for their participants. However, information may be processed, accessed, or preserved when reasonably necessary to deliver the message, address a report, maintain security, prevent abuse, enforce our Terms, comply with law, or resolve a technical problem. We do not promise that any electronic communication system is completely secure.

6. LynxLynkr Market

Market listings and information you include in them may be visible to other users. Information exchanged directly between buyers and sellers is controlled by those users, subject to LynxLynkr’s Terms and applicable law. LynxLynkr may retain listing, reservation, status, and message records as needed to operate the Market, address abuse, and resolve reports.

7. Membership payments and Stripe

When paid memberships are available, Stripe or another disclosed processor may collect and process payment information. Merchandise payments are also processed through Stripe. When card information is entered directly into Stripe’s hosted checkout, LynxLynkr does not receive or store the complete card number or security code.

We may receive transaction information from Stripe, such as the customer email, amount, currency, payment status, processor identifiers, limited payment-method details made available by Stripe, refunds, disputes, and fraud or risk signals. We use that information to confirm payment, provide access or fulfillment, issue receipts, reconcile records, prevent duplicate processing, and address refunds or disputes. Stripe handles information under its own Privacy Policy.

8. Optional Stripe Identity verification

Purpose and choice

Members may voluntarily use Stripe Identity to obtain a verified-member badge. LynxLynkr uses the result to confirm that a submitted government-issued photo ID passed Stripe’s document checks and that a live selfie matched the ID photograph. We also use the result to reduce impersonation, fraudulent verification, and misuse of the service. We do not use Stripe Identity to determine eligibility for credit, employment, housing, insurance, health care, or another purpose governed by the Fair Credit Reporting Act, and verification is not a criminal-background check.

If you do not consent, do not begin the verification process. Declining verification will prevent you from receiving the verified-member badge but will not, by itself, close your LynxLynkr account. If verification is ever required for a particular safety-sensitive feature, we will explain that requirement before collecting information.

Do not begin verification if you are unable to provide legally valid consent because of age or another reason. Where applicable law requires an alternative to biometric verification, contact LynxLynkr before starting; we will provide or coordinate an available verification method that does not process biometric information.

Information collected and biometric processing

After you affirmatively consent, LynxLynkr creates a verification session and redirects you to Stripe’s secure verification flow. LynxLynkr sends Stripe an internal account identifier so the verification result can be matched to the correct account. Stripe may collect images of the front and back of your government-issued ID, information shown on or derived from the document, a live selfie or similar camera capture, device and browser information, IP address, and fraud, security, and technical signals.

For the selfie check, Stripe uses biometric identifiers and facial-recognition technology to compare the live selfie with the photograph on the identity document and to assess whether a real person is present. If synthetic-identity protection is enabled, Stripe may also compare biometric signals from verification attempts to detect instances in which the same person appears with different identity information. Stripe—not LynxLynkr—performs these document, selfie, biometric, and fraud checks.

Consent and Stripe’s role

Before LynxLynkr sends you to Stripe, you must check a consent box specifically authorizing the collection and processing of your government ID, selfie, and related verification information for LynxLynkr identity verification. Stripe may present additional notices and consent choices in its hosted flow. You may stop before submitting your information. After submission, withdrawing consent does not undo processing already completed, but you may remove the badge and request deletion as described below.

LynxLynkr and Stripe each act as independent controllers of personal information for their respective purposes, and Stripe may also process certain information as a service provider to LynxLynkr. Stripe analyzes and uses identity information for verification, risk evaluation, security, and operating and improving its services. Stripe handles that information under its Privacy Policy and Stripe Identity terms.

Identity-verification information may be processed in the United States and other locations where Stripe or its service providers operate. Stripe may use service providers and, when permitted or required by law, may provide verification information to government authorities or other authorized parties as described in Stripe’s policies.

Information LynxLynkr receives and displays

The LynxLynkr application is designed not to copy or store raw ID images, selfie images, document numbers, legal names, birth dates, or addresses in the LynxLynkr database. Stripe stores the submitted identity information in its systems and may make certain verification information available to authorized LynxLynkr personnel through Stripe’s Dashboard or API when permitted. We will access sensitive verification information only when reasonably necessary to troubleshoot the verification, investigate fraud or misuse, respond to a privacy request, or comply with law.

LynxLynkr stores the internal account identifier, Stripe verification-session identifier, verification status, consent time, attempt and status timestamps, and limited failure, revocation, redaction, and webhook-event information needed to operate and secure the program. We do not publicly display your legal name, birth date, address, identification number, ID images, or selfie.

If verification succeeds, LynxLynkr may publicly display the verified-member badge and the fact that verification passed. The badge means only that the submitted document and selfie passed the provider’s checks at that time. It is not an endorsement, character assessment, background check, safety guarantee, or guarantee that a member’s posts, listings, statements, or conduct are trustworthy.

Retention, badge removal, and deletion requests

Unless a shorter period is configured or deletion is requested, Stripe’s standard terms permit submitted verification data to be stored on LynxLynkr’s behalf for up to three years following verification. Stripe may separately retain information for its own permitted legal, fraud-prevention, security, and service-operation purposes as described in Stripe’s policies.

You may remove your badge and request deletion of the associated Stripe verification data by opening Get Verified while signed in and selecting Remove verification and badge. LynxLynkr removes the badge from public display and sends Stripe a request to redact the verification session. Stripe states that redaction may take up to four days and may need to wait until an in-progress verification finishes. When redaction is complete, personal information from the verification session is no longer returned through Stripe’s API or visible in the Stripe Dashboard.

If the automatic deletion request cannot be completed, if you cannot access your account, or if you want to request access to or deletion of identity-verification information another way, submit a request through Contact LynxLynkr. Please identify the request as a Stripe Identity privacy request and provide the username and email address associated with the account. Do not send a copy of your government ID through the contact form unless we specifically request an appropriate verification method.

After badge removal or Stripe redaction, LynxLynkr may retain limited non-image records such as the fact that verification was attempted, consent and status timestamps, revocation or redaction status, webhook-event identifiers, security logs, and records needed to document and fulfill the request. We retain those limited records only as reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, and enforcement of our Terms. A verification-data deletion request does not automatically delete the LynxLynkr account, posts, payment records, merchandise records, or other information governed by other sections of this Policy.

9. Merchandise production and Printful

Products sold through the LynxLynkr Merchandise Store are produced and fulfilled by Printful. To obtain shipping options and fulfill a paid order, we may share with Printful the recipient’s name, email address, optional phone number, shipping address, selected product and variant, quantity, shipping method, order reference, and design or print information associated with the product.

Printful uses this information to manufacture, package, ship, track, support, and otherwise fulfill the order. Printful processes information under its own Privacy Policy. Do not place an order for another person unless you are authorized to provide that person’s delivery information for fulfillment.

10. Receipts and order links

We may email transaction confirmations, receipts, fulfillment updates, or support messages to the address supplied at checkout. A merchandise receipt link may contain an unguessable access token. Anyone who receives that link may be able to view the receipt, so customers should keep it private and contact us if they believe it has been exposed.

11. Other service providers

We may disclose information to providers that help us host, secure, maintain, analyze, communicate, process payments, produce merchandise, ship orders, or support LynxLynkr. Providers receive only information reasonably necessary for their role and are expected to handle it under applicable agreements and law.

12. Legal, safety, and business disclosures

We may preserve or disclose information when reasonably necessary to comply with law or valid legal process; enforce agreements; detect, investigate, or prevent fraud, security incidents, or abuse; protect the rights, property, or safety of LynxLynkr, users, or others; or establish, exercise, or defend legal claims.

If LynxLynkr or relevant assets are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale, information may be transferred as part of that transaction subject to applicable law and appropriate notice where required.

13. Sale of personal information and advertising

LynxLynkr does not sell personal information for money. If our practices change in a way that creates a legal right to opt out of sale, sharing, or targeted advertising, we will update this policy and provide the required choice before engaging in that practice.

14. Data retention

We retain information for as long as reasonably necessary to provide the service, maintain accounts and memberships, fulfill orders, send receipts, meet tax and accounting obligations, resolve disputes, enforce agreements, prevent abuse, preserve security, and maintain appropriate backups. Retention varies by the type of information and why it is needed. Deleting an account or content may not immediately remove copies from backups, legal holds, transaction records, or content that remains part of another user’s interaction.

Stripe Identity information follows the more specific retention and deletion process described in Section 8.

15. Security

We use reasonable administrative and technical safeguards intended to protect information and accounts. No website, database, network, storage system, or transmission method can be guaranteed completely secure. Users are responsible for using a strong password, protecting login credentials and private receipt links, and promptly reporting suspected unauthorized access.

16. Your choices and privacy rights

You may update certain account and profile information through LynxLynkr’s settings. Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing. You may also have a right to appeal a denied privacy request.

Submit a request through Contact LynxLynkr. For Stripe Identity data, you may also use the self-service removal process described in Section 8. We may need to verify your identity and authority before responding. We will not discriminate against you for exercising a privacy right. An authorized agent may submit a request where permitted by law, but we may require proof of authorization.

17. Children’s privacy

LynxLynkr is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we may disable the account and take appropriate steps to delete the information, subject to legal and safety requirements.

18. United States processing

LynxLynkr is operated from the United States. Information may be processed in the United States and in locations where our providers, including payment and fulfillment providers, operate. Privacy protections may differ from those in your location.

19. Third-party websites and embedded services

LynxLynkr may link to or display content from third-party websites or services. Those parties may collect information directly under their own policies. This Privacy Policy does not govern information handled independently by those third parties.

20. Changes to this Privacy Policy

We may update this Privacy Policy as LynxLynkr, our practices, providers, or legal obligations change. We will update the effective date and, when appropriate, provide additional notice of material changes through the website or another reasonable method.

21. Contact us