Privacy Policy
Last updated 3 October 2026
Encore After is run by EncoreAfter LLC, a New Jersey company. This page says what it collects, what it never collects, who can see it and how long it is kept. It is written to be checked against the product, not to cover every possibility. Where it says "never", the software is built so that the thing cannot happen.
What is never collected
- Money. Tips go from a customer's payment app to yours. Encore After has no balance and never sees the transaction.
- Your legal name, email, phone or home address when you open an account. Sign-in is a passkey, and nothing else is asked.
- IP addresses, device fingerprints or location. No request log is kept. Rate limiting reads the connecting address in memory and writes it nowhere.
- Analytics or tracking. No analytics scripts, no advertising pixels, no third-party fonts or scripts. Every file the page loads comes from encoreafter.com.
- Where you work or when, unless you type it in yourself. Nothing is inferred from taps, sign-ins or timestamps.
- Who sent a visitor. Links out of the site carry no referrer, so a payment app, a social network or a data broker is never told the visitor came from here.
If you hold a page
| What | Why | How it is stored |
|---|---|---|
| Your username, the display name you choose, your tagline, theme, photo, payment handles, wishlist, and any schedule or venue you choose to publish | To show your page | In the database. The photo has its location and camera data stripped before it is saved. |
| Passkey public keys, a label for each device, and when it was last used | To sign you in | In the database. The private half never leaves your device. |
| Recovery codes | To get back in if you lose every device | Hashed. The plain codes are shown to you once. |
| Taps: the amount, the payment app, the time, and whether you confirmed or dismissed it | Your records | In the database. A name or phone a customer leaves is encrypted. |
| Your book: customer names, phones, notes, flags | Your records | Encrypted at rest with a key the server holds. No plain-text name, note or flag column exists. |
| Earnings and expenses | Your statements | Amounts and categories in the database; the note and the club name on an expense are encrypted. |
| Posts and messages to your regulars | The customer portal | Encrypted, and deleted on the schedule you set: 7, 14, 30 or 90 days. |
| Push notification subscription | Reminders you turn on | The endpoint and keys your browser issues. Removed when the push service says the device is gone. |
| Language, dashboard preferences, which reminders are on | So the app remembers your settings | In the database, per account. |
| Billing: a Stripe customer id, a subscription id, its status and the period end | To know Pro is paid | In the database. No card, email or address is copied from Stripe. |
The name you type when you first claim a page is held for the minutes that take and then discarded with the rest of the sign-up flow.
If you tip or use the customer app
Opening a performer's page and tipping asks nothing of you. The tap records an amount, a payment app and a time for her records. If you leave your name or phone number for her, it is encrypted and belongs to her book; she can delete it. Your own device may also remember what you typed so you need not type it again. That copy is in your browser only, and the page has a Clear control for it.
The customer app, if a performer invites you to it, holds your list of pages behind a passkey. No name, phone or email is asked. The list is encrypted. Messages and posts you can see are deleted on the schedule each performer sets. "Delete my account" in the app removes your list, your passkeys and your sessions at once.
If you buy a kit or Pro
Checkout and billing are run by Stripe, Inc. Stripe collects your name, email, shipping address and payment details, sends the receipt, and holds the order. Kits are shipped from Stripe's record of the order. EncoreAfter LLC does not copy your name, address, email or card into its own database. What it keeps is the order's Stripe reference, which kit it was, and the invite that lets you claim your page. For Pro it keeps the ids described above.
Stripe's handling of your data is covered by its own privacy policy. Sales tax is calculated by Stripe from the shipping address.
Email sign-ups, applications and the forum
- Email sign-up on the landing page stores your email, your language and a one-use welcome code. Unsubscribing keeps the address on a list that is never mailed again, so it stays unsubscribed.
- Affiliate and ambassador applications store what you type: a name, how to reach you, your role, city and, if you give it, your Instagram. Ambassadors who are accepted have their code, name and contact kept while they are active, and their rewards tracked.
- The forum is open to every account holder. Thread titles and posts are stored in plain text under your username, and are removed, never edited, when moderated. Do not post anyone's private details there.
- Feedback you send from the app or the promo page is stored as written.
Cookies and your device
Cookies are used only to keep you signed in, never to track you. They are HttpOnly and sent only to encoreafter.com.
| Cookie | Purpose | Lifetime |
|---|---|---|
| sid | Performer sign-in | 30 days, extended while you keep using it |
| flow | A sign-in or claim in progress | 10 minutes |
| vsid | Customer app sign-in | 180 days |
| vflow | A customer app sign-in in progress | 10 minutes |
Your browser's local storage may hold your language choice, dashboard preferences such as which tab you were on, whether you dismissed a panel, and, on a tip page, the name and phone you chose to leave. None of this is sent anywhere by itself.
Who can see your data
- You. Everything under your account.
- The people you share your link with. Your page, exactly as you set it. There is no directory and no search.
- The operator who helps you. EncoreAfter LLC's operators can open any account to set it up or fix it, including an encrypted book, because the server holds the key. This is a small company and the operators are its owners. They do not look without a reason, and they do not sell, rent or share what they see.
- Business records. A list of new accounts (username, display name, date), kit orders by Stripe reference, applications, and feedback are visible to the company's admins.
- The law. When a valid court order or legal process requires it. The takedown page says how that is handled and what exists to produce.
Nobody else. Data is never sold, and there is no advertising.
Other companies involved
- Stripe takes payments for kits and Pro, sends receipts, calculates tax and runs the billing portal. It sees what a buyer gives it at checkout.
- Cloudflare carries traffic between the internet and the server that runs Encore After. It sees the connection the way any network carrier does. Encore After stores none of it.
- Apple and Google push services deliver reminders you have turned on. They see that a message went to your device and when. Its content is encrypted to your device.
- The payment apps you link (Cash App, Venmo, PayPal, Zelle, Apple Cash, or your own link) handle the tip under their own terms and privacy policies, on their own sites. Encore After sends them no referrer and adds nothing to the payment.
- YouTube, on the About page only, through its privacy-enhanced player, and only after you press play.
- Google, on a business page that has chosen a "Review us on Google" button. Pressing it opens Google. The page counts how many times a day the button was pressed, and nothing about who pressed it.
No data is shared with advertisers, brokers or analytics companies, because none are used.
How long things are kept
- Your page, taps, book, earnings and statements stay until you delete them or close your account. When Pro ends nothing is deleted; the Pro features lock.
- Messages and posts expire on the schedule the performer set: 7, 14, 30 or 90 days.
- Sign-in sessions expire as the cookie table says. Sign-up flows expire after 10 minutes.
- Backups. A copy of the database is made nightly and 14 are kept, so a deleted record is gone from backups within about two weeks. A copy taken before a database upgrade is kept until the upgrade is known to be safe.
- Deleting a customer from your book also removes their trace from your taps and earnings. That is deliberate.
- Closing your account. Email [email protected] from a signed-in device. Your page, records, book, invites and passkey registrations are removed within 30 days, unless a legal hold requires otherwise. The passkey on your own phone is yours to delete. Your username becomes available again.
- Customer app. "Delete my account" works at once, with no email.
Security
Customer names, notes and messages are encrypted at rest with AES-256-GCM. Sign-in is by passkey, so there is no password to leak or phish. Every connection is over HTTPS. The software runs on equipment EncoreAfter LLC owns, not on a shared cloud account, and every script and font it loads is served from its own domain. No system is perfectly secure, and this page does not claim that one is. What it claims is specific and can be checked.
Your choices
- Edit or clear any field on your page at any time. Every field starts blank.
- Delete any tap, customer, post, expense or photo from your dashboard.
- Turn reminders off in Settings, or remove the site's permission in your browser.
- Unsubscribe from email with the link in any message.
- Ask for a copy of your records: your statements export as CSV from the Money tab, and [email protected] will send the rest.
- Close your account, as described above.
If you live somewhere with privacy rights in law, such as the right to access, correct, delete or port your data, or to object to its use, the same email address is how you exercise them. Requests are answered within 30 days.
Legal requests, children, changes
Legal requests
Court orders, preservation requests and removal requests go to [email protected]. The takedown page sets out the process and what data exists to produce.
Children
Encore After is for adults. Nobody under 18 may hold a page or a customer app account, and a customer must confirm legal age before tipping. If an account belongs to a minor, email the address above and it will be removed.
Changes
When this page changes in a way that matters, the change is announced in your dashboard or on the site at least 14 days before it applies. The date at the top is when it last changed.
Contact
EncoreAfter LLC, New Jersey. [email protected]