Privacy Policy — Noctis Network

Who we are

Noctis Network (“Noctis,” “we,” “us”) operates the website at noctisnetwork.com and a related affiliate platform, paid membership, and advertiser portal. We connect people who create and distribute promotional content (“affiliates”) with offers from third-party advertisers (currently OnlyFans creators and the agencies that represent them). This policy explains what we collect, why, and who we share it with.

Who this covers

This policy applies to four groups: (1) visitors to our marketing pages; (2) members who purchase a paid membership; (3) affiliates with a platform account; and (4) advertisers (agencies/creators) who use the advertiser portal. Where a section applies only to one group, we say so.

What we collect

Account data: email, name, and contact handles you provide (e.g. Telegram or Discord), plus, for affiliates, your traffic-source description and estimated monthly views.
Membership & payment data: when you buy a membership, our payment processor (Stripe) collects your card and billing details and processes the charge. We do not receive or store your full card number — we receive your email, a payment/subscription identifier, billing country/postal code, and transaction status.
Payout data (affiliates): bank or wire details you provide so we can pay you. Stored encrypted at rest (libsodium secretbox) and decrypted only to generate a payout.
Advertiser data: agency name, billing details, team members’ emails, and the OnlyFans account/connection metadata needed to run your offers.
Usage & tracking data: clicks on tracking links, including a salted hash of the visitor’s IP (not the raw IP), user agent, and country code.
Conversion data: subscription/sale events sourced from OnlyFansAPI for the offers promoted, including subscriber identifiers from the advertiser’s system.
Advertising & measurement data: see “Advertising and the Meta Pixel” below — this includes Meta cookies, a first-party identifier we set, and events about your activity on our pages.
Device & log data: IP address, browser/device info, and timestamps captured automatically by our hosting and security layers.

How we use it

To provide the membership, affiliate platform, and advertiser portal.
To process payments, subscriptions, and renewals, and to send affiliate payouts.
To track conversions and calculate commissions earned and amounts owed.
To measure and improve our advertising (see Meta section below).
To send transactional email — sign-in links, status changes, billing and payout notices — via Resend.
To prevent fraud and abuse, and to audit administrative actions.
To comply with legal, tax, and accounting obligations.

Advertising and the Meta Pixel

We use the Meta Pixel (browser) and the Meta Conversions API (server-side) to measure ad performance and reach relevant audiences. Through these we may share with Meta Platforms, Inc.:

Event data (e.g. PageView, ViewContent, InitiateCheckout, Purchase) with timestamps and the page URL.
Meta cookies _fbp and _fbc (the latter only when you arrive from a Meta ad), and a first-party identifier we set in a noctis_xid cookie for matching.
Your email address in hashed (SHA-256) form, plus IP address and user agent, used by Meta to match events to accounts. We do not send your raw email to Meta for this purpose.

This helps us attribute conversions and optimize campaigns. Depending on your jurisdiction, this sharing may be considered “sharing” or “sale” of personal information for targeted advertising — see “Your rights.” You can also limit ad tracking via your browser and your Meta ad preferences.

Payments

Card payments are processed by Stripe, a PCI-DSS Level 1 certified processor. Your card data is collected and handled by Stripe under Stripe’s privacy policy; we never see or store full card numbers.

Who we share it with

We don’t sell your personal information for money. We share it with service providers who process it on our behalf:

Stripe — payment and subscription processing.
Meta Platforms — advertising measurement (see above).
OnlyFansAPI — offer-side tracking links and conversion data. They see tracking-link metadata, not your name, payout details, or contact info.
Resend — transactional email (sees your email address).
Supabase — database hosting (data at rest).
Vercel — application hosting and edge network.
Discord — if you join or link our community, your use is also governed by Discord’s privacy policy.

We may also disclose information to comply with law, enforce our terms, prevent fraud, or in connection with a merger or acquisition. Noctis admins (our staff) have access to account data, including decrypted payout details when generating a payout.

Cookies

We use: essential cookies for authentication (Supabase session); advertising cookies for the Meta Pixel (_fbp, _fbc); and a first-party noctis_xid identifier used for ad matching. Blocking cookies may break sign-in and reduce measurement accuracy but won’t stop you from using the public pages.

International transfers

We’re based in Canada and use providers in the United States and elsewhere. Using the platform may involve transferring your data across borders, including to the U.S. Where required, we rely on appropriate safeguards (e.g. Standard Contractual Clauses) for such transfers.

Security

We protect data with encryption in transit (HTTPS), encryption at rest for sensitive payout details, access controls, and audit logging. No system is perfectly secure, but we work to protect your information and will notify you of a breach where required by law.

Retention

We keep account, click, and conversion data while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, but retain anonymized conversion history and records needed for accounting, tax, chargeback reconciliation, and legal compliance.

Your rights

Depending on where you live (e.g. GDPR for the EU/UK, CCPA/CPRA for California), you may have the right to access, correct, delete, or export your data, to withdraw consent, and to opt out of the “sale” or “sharing” of personal information for targeted advertising (including the Meta sharing described above). To exercise any of these, email partners@noctisnetwork.com. We’ll respond within the time your law requires (generally within 30–45 days) and won’t discriminate against you for exercising a right.

Children

The platform is strictly for adults. We do not knowingly collect data from anyone under 18 (or the age of majority where you live). If you believe a minor has provided us data, contact us and we will delete it.

Changes

We may update this policy. Material changes will be posted here with a new “last updated” date and, where appropriate, emailed to account holders.

Contact

Questions or requests? Reach us at partners@noctisnetwork.com.

This policy is provided for transparency and is not legal advice. Specific jurisdictions may grant additional rights, which we honor where applicable. Have counsel review before relying on it at scale.