What data we keep
A plain list of every kind of data ShoutXChange holds, why we hold it, and how long.
Updated April 15, 2026
We try to be straight about the data we hold. Here is the full list.
Account basics
- Your email and a hash of your password (a hash is a one-way fingerprint. We cannot read your password back out).
- Your stage name and any pages you connect.
- The date you joined.
- Your two-factor settings, if you turned it on.
We keep these as long as your account is open. They are deleted in the 30-day window after you delete your account.
Trade and campaign records
- Every campaign you ran.
- Every match you accepted, passed, or had cancelled.
- Every fan we counted on a shoutout link.
- Your trust score and band.
We keep these as long as your account is open. They are deleted in the 30-day window after delete.
Credit ledger
- Every credit move in and out.
- Why each move happened. The trade, the purchase, the refund.
We keep these as long as your account is open. They are deleted in the 30-day window after delete.
Billing records
- Your invoices, with line items.
- Your receipts.
- Stripe's record of past charges (we hold a token, Stripe holds the card).
Tax law says we hold invoices and receipts for a fixed number of years. After that window, they are deleted. The number depends on where we operate. Typically five to seven years.
Tracking pixels and links
- A short token for each shoutout link, so we know which fans came from which trade.
These are deleted after 30 days, since by then we have already counted the fans.
Logs
- Sign-in times and rough locations, for safety.
- Page views inside the dashboard, for fixing bugs.
These are kept for 90 days, then deleted.
What we never store
- Your OnlyFans password. Ever.
- Your full credit card number. Stripe holds that, not us.
- Private messages you send your fans on OnlyFans.
- The contents of your direct messages with other creators outside ShoutXChange.
Where the data lives
Our database is hosted in the United States. We use industry-standard storage with encryption at rest and in transit. We do not sell or rent your data to anyone, ever.
Want a copy?
See the article on exporting your data. You can download a full copy any time.
Want it gone?
See the article on deleting your account.
Questions?
Use the contact form and pick "Privacy". We will answer.
Was this helpful?
Your vote helps us write better articles.