Privacy Policy

This Privacy Policy explains how personal data is handled when you visit joinwolfhunter.com, buy a White Wolf membership or Silver Supporter subscription, create a Wolfhunter account, or take part in the Wolfhunter community. It is written to meet the EU General Data Protection Regulation (GDPR) and Italian data-protection law. Terms in capitals that are not defined here have the meaning given in the Terms of Service.

1. Who controls your data

   The data controller is:

   Operator

   Lorenzo Caccialupi, trading as Wolfhunter

   P.IVA

   18437481007

   Address

   Via Pierluigi Sagramoso 52, Rome, Italy

   Contact

   lorenzo@wolfhunter.io

   For any question about this Policy, or to exercise a right described in section 17, write to that address. Wolfhunter has not appointed a Data Protection Officer; it is not required to.

2. What Wolfhunter collects

   Wolfhunter collects only what the membership needs to work. In outline, that is: the details you give at checkout, the account you create afterwards, the record of your membership, anything you choose to send or share, and the minimal technical information that any website receives. Sections 3 to 7 describe each in turn.

3. Checkout and payment information

   Payments are taken by Stripe. When you choose a plan, Stripe's checkout form is shown — embedded inside the Wolfhunter page for White Wolf, or on Stripe's own page for Silver Supporter. Stripe collects your email address, your payment-card details, and, where Stripe asks for it, your billing address. Your card number is entered into Stripe's form and processed by Stripe; Wolfhunter's own systems do not receive or hold your full card number.

   After a payment, Stripe sends Wolfhunter a signed notification. From it Wolfhunter records: your email address as entered at checkout, Stripe's identifiers for your customer record, subscription and checkout session, the price you chose, the payment status, the date paid, the current billing period, and whether the subscription is set to cancel at the end of the period. Stripe also keeps its own record of the transaction under its terms.

4. Account and authentication information

   A Wolfhunter account is created after payment, on the /entered page, using Clerk, an authentication service. Clerk collects the email address you sign up or sign in with, its verification status, and the method used (an email code, or a third-party sign-in such as Google where it is offered). Clerk assigns you a user identifier.

   Wolfhunter receives from Clerk your user identifier and the list of email addresses on your account that Clerk has marked as verified. Wolfhunter uses those to confirm that the person signing in is the person who paid (section 8). Wolfhunter does not receive your password; Clerk handles passwords, codes and sessions.

5. Membership information and status

   For each paid entry Wolfhunter keeps one membership record: the membership type (White Wolf monthly, White Wolf annual, Founding White Wolf, or Silver Supporter), its status (paid but not yet claimed, active, past due, cancelled), the Clerk user identifier once the entry has been claimed, the date it was claimed, your Mark (the Wolfhunter identifier issued to a White Wolf), and, for the first hundred annual entries, a Founding number.

   The membership record is stored in Airtable. The allocation of Founding numbers and Marks, and the record of which checkout session has been claimed by which account, are kept in Netlify Blobs, keyed to Stripe's subscription identifier rather than to your name.

6. Information you choose to provide

   At the Gate you may type a Mark number you want to carry; it is stored in your own browser and sent with your payment as a preference. If you email Wolfhunter, your message and address are kept as correspondence. If you join the Waiting Room or other community spaces (section 12), whatever you post there is visible to the other members of that space and is handled by the platform that hosts it.

7. Technical and security information

   Wolfhunter runs no analytics, advertising or tracking scripts of its own. The pages load no analytics suite, tag-management container, advertising pixel, session recorder or other third-party measurement tool.

   The site is hosted on Netlify. Like any web host, Netlify receives the technical details of each request — IP address, browser type, the page requested, and the time — and may keep them in short-lived logs for operating and securing the service. Wolfhunter's server functions (which create checkout sessions, receive Stripe's notifications, and answer the /entered page) run on Netlify and see the same request details.

   The offer page records the steps you take through it (for example that a plan was chosen) in your own browser's local storage only. That record is never transmitted to Wolfhunter or anyone else; it exists so the page can behave sensibly if you return, and it disappears when you clear your browser data.

8. How Wolfhunter uses information

   Wolfhunter uses personal data to:

   • take your payment and set up the subscription you chose;
   • record that a payment was made and keep the record current as Stripe reports renewals, failures and cancellations;
   • let you claim the membership you paid for — by checking that a verified email address on your Clerk account is the email address used at checkout before the paid entry is bound to your account;
   • issue your Mark and, where applicable, your Founding number, and make sure neither is issued twice;
   • decide what you may access — the Waiting Room is opened only to an account holding an active White Wolf membership;
   • send you necessary communications about your account, payment or membership;
   • answer your requests and correspondence;
   • keep the service secure, prevent fraud and abuse, and establish or defend legal claims;
   • meet Wolfhunter's legal obligations, including accounting and tax record-keeping.

   Wolfhunter does not sell personal data, does not use it for third-party targeted advertising, and does not make decisions about you by automated means that produce legal or similarly significant effects.

9. Legal bases under the GDPR

   Wolfhunter relies on the following bases in Article 6(1) of the GDPR:

   • Performance of a contract (Art. 6(1)(b)) — taking payment, creating and maintaining your membership, letting you claim it, issuing your Mark, giving you access, and sending service communications.
   • Legal obligation (Art. 6(1)(c)) — keeping the accounting and tax records that Italian law requires of a business, and answering lawful requests from authorities.
   • Legitimate interests (Art. 6(1)(f)) — securing the service, preventing fraud (for example, making sure one paid entry cannot be claimed by two accounts), keeping technical logs, and defending legal claims. These interests are balanced against your rights, and you may object (section 17).
   • Consent (Art. 6(1)(a)) — only where Wolfhunter asks for it, for example if marketing communications are introduced in future (section 19). Consent can be withdrawn at any time.

10. Payment processing through Stripe

    Stripe is a payment institution and acts as an independent controller for the payment data it processes under its own privacy policy, and as Wolfhunter's processor for the checkout and subscription services it provides. Stripe's form may set cookies or use similar technologies for fraud prevention when it is loaded. Stripe's notifications to Wolfhunter are cryptographically signed and verified before anything is recorded.

11. Authentication through Clerk

    Clerk provides the sign-up, sign-in and session service for Wolfhunter accounts and processes your account data on Wolfhunter's behalf. Clerk sets cookies on the /entered page to keep you signed in. If you sign in with Google, Google acts as an identity provider under its own terms; Wolfhunter receives only what Clerk passes on (your identifier and verified email addresses), and the Google account that happens to be signed in on your device is never treated as the owner of a purchase — ownership is established solely by the verified-email match described in section 8.

    Clerk's script is delivered from the jsDelivr content-delivery network; when the /entered page loads, jsDelivr receives your IP address and browser details in order to serve that file.

12. Infrastructure and other processors

    The services below process personal data for Wolfhunter. Each acts under a data-processing agreement or under its published terms, and each is limited to the purpose shown.

    Service	Purpose	Data it processes
    Stripe	Payments, subscriptions, invoices	Email, card and billing details, transaction records
    Clerk	Account sign-up, sign-in, sessions	Email, verification status, sign-in method, session tokens
    Netlify	Hosting and server functions	Request logs (IP, browser, page, time)
    Netlify Blobs	Allocation records for Founding numbers, Marks and claims	Stripe subscription identifiers, Clerk user identifiers, issued numbers
    Airtable	The membership record	Email, Stripe identifiers, membership type and status, Clerk user identifier, Mark, Founding number, dates
    Vimeo	Plays the film on the offer page	Playback requests; embedded with Vimeo's "Do Not Track" setting enabled
    jsDelivr	Delivers the Clerk script on /entered	IP address and browser details of the request
    Telegram	Hosts the Waiting Room (section 12)	Your Telegram profile and what you post there, under Telegram's terms

    Wolfhunter does not use any other hosting, database, analytics, advertising or email-marketing provider at this time. If a new processor is added, this Policy will be updated.

13. Sharing and community spaces

    Wolfhunter shares personal data only with the processors listed above, with professional advisers where necessary, and with authorities where the law requires it. Wolfhunter does not give member lists to third parties.

    The Waiting Room is a private group on Telegram. Joining it is your choice. When you do, other members of that group can see your Telegram profile as Telegram displays it, and Telegram processes your data under its own privacy policy. Wolfhunter administers the group and may remove members under the Terms of Service.

14. International transfers

    Wolfhunter is in Italy. Some of the processors above are established in, or operate infrastructure in, the United States or other countries outside the European Economic Area. Where a transfer takes place, it relies on the safeguards provided in that processor's data-processing terms — the European Commission's Standard Contractual Clauses, an adequacy decision (including the EU–US Data Privacy Framework where the processor is certified under it), or another mechanism recognised by the GDPR. Wolfhunter does not make guarantees about a processor's certification status beyond what that processor publishes; you can ask Wolfhunter which mechanism applies to a specific transfer.

15. How long data is kept

    • Membership and payment records are kept while your membership exists and afterwards for as long as Italian accounting and tax law requires business records to be retained, and for as long as needed to establish or defend legal claims.
    • Account data held by Clerk is kept while your account exists. You may ask for your account to be deleted (section 17).
    • Issued Marks and Founding numbers are recorded permanently, keyed to Stripe's subscription identifier, because Wolfhunter promises that a Founding number is never issued again and that a Mark belongs to one Wolf.
    • Correspondence is kept for as long as needed to deal with the matter and for any legal retention period.
    • Technical logs held by Netlify are short-lived and governed by Netlify's retention settings.
    • Browser storage on your device stays until you clear it.

16. Security

    All traffic to joinwolfhunter.com is encrypted (HTTPS). Secret credentials for Stripe, Clerk, Airtable and the Waiting Room are held only in the server environment and never appear in a web page. Stripe's payment notifications are signature-verified. A membership is bound to an account only through a verified sign-in and the email match described in section 8, and a paid entry can be claimed once. Card details are handled by Stripe. No system can be guaranteed perfectly secure; if Wolfhunter becomes aware of a personal-data breach that is likely to put you at risk, it will inform you and the supervisory authority as the GDPR requires.

17. Your rights

    Under the GDPR you may, subject to its conditions and exceptions:

    • access the personal data Wolfhunter holds about you and receive a copy;
    • rectify data that is inaccurate or incomplete;
    • erase your data, where there is no overriding legal reason to keep it (for example, a tax record);
    • restrict processing in the circumstances the GDPR sets out;
    • object to processing based on legitimate interests, and to any direct marketing;
    • receive your data in a portable format, where processing is based on contract or consent and carried out by automated means;
    • withdraw consent at any time, where consent is the basis, without affecting earlier processing;
    • lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it) — or with the authority of the EU country where you live or work.

    To exercise any of these, email lorenzo@wolfhunter.io from the address on your account, or explain how Wolfhunter can confirm it is you. Wolfhunter answers within one month, extendable where the GDPR allows. Note that deleting your account or data does not by itself cancel a subscription; section 8 of the Terms of Service explains how to cancel.

18. Cookies, local storage and session storage

    Wolfhunter's own pages set no cookies. They use the browser's local storage and session storage for the following, none of which identifies you to Wolfhunter or leaves your device:

    Key	Where	What it holds
    wh.mark	Local storage	The Mark number you typed at the Gate
    wh.theme	Local storage	Your Dark / Bone display choice
    wh.funnel	Local storage	An on-device note of the steps taken through the offer; never sent anywhere
    wh.crossed77	Session storage	That this tab has passed the Gate
    wh.session77	Session storage	The Stripe checkout session reference while you claim your entry on /entered, so a sign-in that leaves the page returns to the same purchase

    Third-party services set their own cookies when their components load: Stripe when its payment form is shown (fraud prevention and form operation), Clerk on /entered (keeping you signed in), and Vimeo when the film plays on the offer page — the player is embedded with Vimeo's "Do Not Track" parameter, which instructs Vimeo not to track your viewing session, though Vimeo may still set cookies strictly necessary for playback. Each of these providers describes its cookies in its own policy. Wolfhunter does not run advertising or analytics cookies. You can clear or block storage and cookies in your browser; doing so may stop the payment form, sign-in or film from working.

19. Communications

    Wolfhunter may send you communications that are necessary to run your account and membership — for example confirmation that an entry has been claimed, notice of a failed renewal, notice of changes to these documents, or a reply to something you asked. Stripe sends payment receipts and Clerk sends sign-in codes on Wolfhunter's behalf. These are service messages, not marketing, and you cannot opt out of them while you hold a membership.

    At launch Wolfhunter operates no marketing-email system. If marketing communications are introduced, they will be sent only on a lawful basis — with your consent where the law requires it — and every such message will carry a way to opt out.

20. Age

    Wolfhunter membership is for adults: you must be at least 18 to buy a membership or create an account. Some physical Gatherings and events are restricted to those 21 and over where Wolfhunter says so for that event. Wolfhunter does not knowingly collect personal data from anyone under 18; if you believe it has, write to lorenzo@wolfhunter.io and the data will be removed.

21. Changes to this Policy

    Wolfhunter may update this Policy as the service, the law or the processors change. The date at the top shows the current version. For a material change Wolfhunter will give notice — by email to members, or by a clear notice on the site — before it takes effect.

22. Contact

    Lorenzo Caccialupi, trading as Wolfhunter · P.IVA 18437481007 · Via Pierluigi Sagramoso 52, Rome, Italy · lorenzo@wolfhunter.io