Privacy Policy

1.Who we are

Journey (getjourney.gg) is run by Journey Forever LLC, based in Austin, TX, US. We are responsible for the personal data described in this policy.

This policy covers our website, your Journey account and the guides you buy through it.

2.Data we collect

We collect only what we need to run Journey:

• Account data: your email address, username and, if you set one, your password, which we store only as a secure hash. If you turn on two-factor authentication, we store the settings it needs.
• Linked services: when you sign in with Google, Discord or Twitch, or link Battle.net, we receive your account ID with that service and the name, email address and profile picture it shares. We don't keep your profile picture. Battle.net shares only your account ID and BattleTag. We also store the sign-in tokens these services issue to us, in encrypted form.
• Sessions and security: the IP address and browser of each signed-in session, and when you accepted our terms.
• Purchases: what you bought, the price, the order and refund status, payment references from Stripe and any creator code you used. We never receive your full card details.
• Email preferences: which optional emails you want to receive. If an email to you bounces or you mark one as spam, we turn off your optional emails.
• Support messages: the topic, guide, email address and message you send through our contact form, and your username if you're signed in.
• Usage data: which pages you visit, the site that sent you, and your browser, device type, screen size, language and country. We measure this with Umami, which we run ourselves. It sets no cookies and doesn't store your IP address.
• Error reports: when something breaks on our website or servers, what went wrong, where it happened, the page or request involved and your browser and device type.

3.Sign-in with Google and other services

If you sign in with Google, we ask only for your basic profile: your Google account ID, name, email address and profile picture. We use it only to create your Journey account, sign you in and show your name in your account. We never access other Google data such as Gmail, Drive or contacts.

We do not sell Google user data, use it for advertising or share it with anyone except the providers that host Journey for us. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We treat data from Discord, Twitch and Battle.net the same way. You can unlink a service at any time on your profile page, or remove Journey's access in that service's own account settings.

4.How we use your data

We use your data to:

• create your account, sign you in and keep it secure
• sell you guides, give you access to them and handle refunds and disputes
• send emails you need, such as sign-in links, email confirmations, password resets and changes to your guide access
• send product updates or marketing emails, only if you turn them on
• credit the creator whose code you used
• answer your support messages
• let authorized members of our team view and edit your account, sign in to it to resolve a support request, export your data and schedule its deletion; we log every action they take
• understand how Journey is used and fix problems
• prevent fraud, spam and abuse
• keep the records tax and accounting law requires

If you are in the EEA or the UK, we rely on these legal bases: performing our contract with you, our legitimate interest in keeping Journey working and secure and in preventing fraud, your consent for optional emails, and our legal obligations.

We do not sell your data, show ads or build advertising profiles.

5.Cookies

We use only cookies and storage that Journey needs to work, so we do not ask for cookie consent:

• Sign-in cookies keep you signed in on getjourney.gg and api.getjourney.gg.
• When you open a creator's link or enter their code, your browser remembers it so it is applied at checkout.
• If you choose to trust a device when you enter a two-factor code, a cookie lets that device skip the code for 30 days.
• Cloudflare Turnstile checks that you are human on sign-in, sign-up and contact forms.

We use no analytics or advertising cookies.

6.Payments (Stripe)

Checkout runs on Stripe. Link, a Stripe company, is the merchant of record: it sells you the guide on our behalf and handles payment, tax, receipts and refunds. Stripe collects your payment details and billing information under its own privacy policy at stripe.com/privacy.

We receive the result of your purchase and keep your name and email address at Stripe matching your Journey account. Your Stripe customer record and checkout also store your Journey account ID. If you check out without signing in, we create a Journey account for the email address you enter so you can sign in with a link and access your guide.

If a card issuer reports a purchase as fraudulent, we refund it and Stripe adds the card and email address to our block list.

7.Sharing with third parties

We share data only with providers that help us run Journey, and only as much as they need:

• Cloudflare hosts our website and database, keeps our server logs and protects Journey against abuse. Its Turnstile check receives your IP address.
• Resend and Amazon Web Services (Amazon SES) deliver our emails.
• Stripe processes payments.
• Nexus tracks sales made with creator codes so creators get paid. It receives the order, the amount and your Journey account ID, but not your name or email address.
• Google Workspace hosts our support mailbox.
• netcup hosts the server that runs our analytics and error reports.
• Google, Discord, Twitch and Battle.net, only if you choose to use them with Journey.

Creators learn that a purchase used their code, but we do not give them your name or email address. We also disclose data when the law requires it, to protect our rights or users, or as part of a sale or merger of our business.

8.Where we store data

Journey runs in the United States. Your data is stored on Cloudflare servers, and Cloudflare may handle your requests in data centers near you. Analytics and error reports are stored on a netcup server in the United States. If you are outside the US, your data is transferred there, with safeguards such as the European Commission's Standard Contractual Clauses used by our providers.

9.How long we keep data

• Your account is kept until you delete it. Deletion happens 14 days after you request it, and you can cancel it until then. Your account, sessions, linked services, email preferences and saved creator code are then deleted.
• Sessions expire 30 days after you last use them. Sign-in, confirmation and password reset links expire within an hour.
• Paid orders stay in your account. Once you delete it, we delete your Stripe customer record and keep the orders, with their Stripe payment references but without your account, for tax and accounting until the end of the eighth calendar year after the purchase. Unpaid checkouts are deleted after 30 days.
• Stripe keeps its own payment records as the law requires.
• Records of actions our admins take on accounts are kept for two years.
• Support emails are kept as long as we need them to handle your request.
• Usage data is deleted after 30 days, and error reports and server logs after 7 days.

10.Your rights

You can change your username and email address, unlink sign-in services, sign out other sessions, change your email preferences and delete your account on your profile page. Every optional email also has an unsubscribe link.

You can also ask us for a copy of your data, to correct it, to restrict or object to how we use it, or to move it to another service. Email support@getjourney.gg and we will answer within 30 days. We may ask you to confirm the request from your account's email address.

If you are in the EEA or the UK, you can also complain to your local data protection authority.

11.Children

Journey is not meant for children under 13, or under the minimum age for consenting to data processing in your country. We do not knowingly collect their data, and we delete it if we learn we have.

12.Changes to this policy

We update this policy when Journey changes. The date at the top shows the latest version, and we will email you before important changes take effect.

13.Contact

Questions about your data? Email support@getjourney.gg or write to Journey Forever LLC, Austin, TX, US.