Privacy Policy

Effective October 7, 2026. Brass is operated by Adore LLC, 8 The Green, STE A, Dover, DE 19901. Contact: hello@adorellc.pro.

What we collect

• Your email address, your date of birth, and your statement that you live in the United States.
• Purchase records: pack sizes, amounts, dates, refunds, and from Stripe the card’s country, brand, funding type (credit, debit or prepaid), a fingerprint that identifies the card without revealing it, the wallet used (such as Apple Pay), how 3D Secure ran and its result, Stripe’s fraud risk score, and the billing ZIP code and state, which state unclaimed property reports ask for, and, when a link in a Brass email brought you to the buy page, which email it was. Stripe processes your card; we never see or store the card number.
• Usage records for each message: the model, token counts, the list price, our cut and the total. We do not store the text of your messages or the replies.
• Gift records: the recipient’s email address and first name, your first name and your note, if you enter them.
• The name and mailing address you give us for a check: a cash-out, or a refund or cash-out the card’s bank sent back, given in the stash or by replying to our email, and, for a check to a card’s holder, the name and address it was mailed to.
• Your bank’s record of a charge, when you send it to claim a check owed to a card’s holder, to end a hold on a pack, or to ask us to look again at a paused account. We ask for that one charge, with your other charges covered. Whatever it is sent for, we note that it matched (the name on the card, the card’s last four digits, the billing ZIP code and the date) and delete the record and the email it came with.
• Waitlist answers, if you joined the waitlist.
• The IP address you sign in, buy, claim and chat from, and the country it maps to, kept with those records to enforce the United States limit and to prevent fraud; sign-in addresses are kept for 120 days. IP geolocation by DB-IP (db-ip.com), CC BY 4.0.
• Where you came from when you first signed in or joined the waitlist: the campaign tags in the link, the referring website’s name, any referral tag, and the first page you visited on Brass. Your browser keeps these for 30 days, or, when the first page was the market board or one of its model pages, for 90 days or until February 1, 2027, whichever is later, and sends them to us only when you sign in or join the waitlist. Every view of a public page, and every opening of a gift link, also sends us the page’s path, the site that sent you and any campaign tags; we keep those only as daily counts by page and by site, with nothing that identifies you.
• Technical logs such as browser type and errors, kept for up to 30 days for security.
• If a date of birth shows someone under 18, a record of the attempt, so we can refuse a second try, and we delete a new account that holds nothing. The record keeps only a one-way fingerprint of the email address, never the address itself.

Your conversations

Your conversation history stays in your browser. To answer a message, we send its text, with up to 40 earlier messages and answers from the conversation, to the maker of the model you picked for it, or to a company that hosts that model, through our routing supplier, and to an automated safety check through the same supplier, with the last three messages you wrote before it, and any earlier message or answer the chat cannot show was checked, such as a stopped answer, for context. With it we send a coded number for your account, never your email address, so the supplier can spot abuse. We keep only whether a message was flagged and the category, never its text. For a message about suicide or self-harm we keep nothing with your account that shows what it was about, only a daily count of how often the chat showed the crisis line. Our Consumer Health Data Privacy Policy says more. We ask suppliers not to use your messages for training. Model makers may keep messages for a limited time to check for abuse under their own policies, for example up to 30 days for some models.

How we use data

To run your account, process purchases and refunds, deliver gifts, show receipts, prevent fraud and abuse, keep financial records, and meet legal duties. We email you about your account, your purchases and your gifts, including gift reminders and, at most once a month for each model you used, a notice when its price falls, or rises by 10% or more, and one notice before a rise of 10% or more that its maker has announced with a date. If you joined the waitlist, we email you about the launch and nothing else unless you ask for more.

Who we share data with

• Stripe, to process payments and refunds.
• Our routing supplier, the model makers and the companies that host models, to generate replies and to run the safety check on messages and on a gift’s names and note.
• Resend, to send email.
• Our bank, when it mails a check for us (a cash-out, or a refund the card’s bank sent back), with the name and mailing address the check goes to.
• Our database and hosting providers, to run the service.
• Authorities, when the law requires it.
• A company that takes over Brass under the Terms’ transfer section, which keeps this policy’s promises for the data it receives.

We do not sell your personal information and we do not share it for advertising.

How long we keep data

Account and usage records while your account is open. When an account closes, we delete its personal details within 30 days: the email address, date of birth, sign-in records and the gift details it entered. The amounts of its purchases, refunds and usage stay in our financial records for 7 years without them, with each purchase’s card details, billing ZIP code and state, and the IP address and country it came from, which tax, chargeback and unclaimed property rules require. An account closed with any opened balance keeps its email address, so we can pay it out or reopen the account if you ask. An account closed within 30 days of a card refund or cash-out, or while we owe it money its card’s bank sent back, keeps its email address until neither holds, so we can tell you how that money is paid; the daily cleanup then deletes it. Cash-out records, and any mailing address given for a check, in the stash or by replying to our email, are kept with purchase and refund records. Emails you send to hello@adorellc.pro are kept for 2 years, or for 7 years when they concern a payment, a refund or a cash-out, except a bank’s record of a charge, sent for any reason, which we delete, with its email, once we have noted that it matched. A gift recipient’s email address is deleted 90 days after the gift is claimed, comes back to the sender, is cancelled or is refunded. The copy of a gift’s details kept with its checkout is deleted a day after the payment completes or the checkout closes. Waitlist email addresses are deleted 12 months after you join, unless you ask us to delete yours sooner. Sign-in addresses for 120 days. Technical logs for up to 30 days. Database backups that still hold deleted details are overwritten within 45 days.

Cookies and browser storage

Brass uses only the cookies it needs to run: one that keeps you signed in, one that protects forms from forgery, one that remembers a sign-in link request for 15 minutes, one that remembers an age check for 30 days, and one that recognizes an email address that has signed in from this browser, so its sign-in links keep working when the site is busy. That last one holds a one-way fingerprint of the address, never the address itself. Your browser also keeps the first-visit details described above, for the periods given there.

We use no advertising or tracking cookies. No other company collects information about your activity across websites through Brass pages. Stripe’s payment page is covered by Stripe’s privacy policy. Because we do no cross-site tracking, we treat every visit the same whether or not your browser sends a Do Not Track signal.

Your choices

Email hello@adorellc.pro to see the data we hold about you, correct it, or delete your account. Every gift email has a link to stop all Brass gift emails to that address, and marking one as spam does the same; to keep that promise we store a one-way fingerprint of the address, not the address. We will reply within 30 days. Records we must keep by law, such as purchase records, are kept until that duty ends. California residents have rights to know, delete and correct personal information and to not be discriminated against for using them; we do not sell or share personal information as California defines those terms.

Age

Brass is for people 18 and over.

Changes

We will post changes here and email account holders about material ones.

This is version 2026-10-07-66d77847d1, kept at https://brass.adorellc.pro/legal/2026-10-07-66d77847d1/privacy.