ARCHIVE 001 // THE RECORD OF WHAT WE KEEP
Privacy
Last updated October 19, 2026
The archive keeps clothes, references and the people who make them. It does not keep tabs on you. Here is exactly what we collect, why, who helps us handle it, how long it stays, and how to see or delete it.
The short version
- Analytics only if you say yes. We use Google Analytics cookies to see which parts of the archive people reach, but only after you tap "Accept analytics". No ads, no ad pixels, no fingerprinting.
- We never sell or share your personal information for advertising, and we never will.
- We only collect what you give us: your email if you join the list, your entry if you enter the Casting Room, and what you do with the Discord bot.
- A few small things are saved on your own device so the site remembers you. You can clear them below in one tap.
- You can ask us to show, correct or delete your data at any time. In Discord,
/my-datadoes it instantly.
- 1. Who we are
- 2. What we collect and why
- 3. Cookies and on-device storage
- 4. The Discord server and the Archivist
- 5. What is public by design
- 6. Who helps us run things
- 7. How long we keep it
- 8. Your rights and choices
- 9. California and other US states
- 10. Visitors outside the US
- 11. Children
- 12. Security
- 13. Changes
- 14. Contact
1. Who we are
PUNX ARMY is the campaign world of the artist YESOP, run by [SPONSOR LEGAL NAME], [SPONSOR MAILING ADDRESS] ("PUNX", "we", "us"). This policy covers punxarmy.com, the Casting Room contest, the email list and the PUNX ARMY Discord server and its bot, the Archivist. Questions go to booking@punxarmy.com.
2. What we collect and why
| When | What | Why |
|---|---|---|
| You visit any page | Our web host and our contest server receive standard request data: IP address, browser type, the page asked for, time. We do not add tracking of our own. | Delivering the site, keeping it secure, stopping abuse. |
| You go through the initiation | Your role, file number, signal code and which of the final three actions you carried. Saved only on your device (see section 3). Not sent to us. | So the site remembers your place when you come back. |
| You join the email list ("Receive the next transmission") | Your email address, plus the role, file number and signal code you were given. | Sending you new drops and updates from YESOP and PUNX ARMY. Nothing else. |
| You enter the Casting Room | Your Instagram or TikTok handle, the link to your public post, format, look title, prompt, the "detail to notice", city, your role, your confirmations, and any Crew Credit (their handle and what they did). We also keep a one-way, salted hash of your connection address, never the address itself. | Running and judging the contest, preventing duplicate or automated entries, crediting you and your crew, and contacting finalists. |
| You win or become a finalist | What the official rules require: confirmation of eligibility, a signed release, a shoot agreement, contact details for scheduling, and a tax form if the law requires one. Collected separately, only from those people. | Awarding the prize and meeting legal and tax duties. |
| You use the Discord server | See section 4. | Running the server, its features and the Archivist. |
| You allow analytics | Through Google Analytics: pages you view (with personal codes removed from the address), how you got here, rough location (city level), device and browser type, and moments like starting the initiation, reaching a chapter or carrying the signal. Never your name, email, handles or entry details. | Understanding which parts of the site work, so we can make it better. |
| You email us | Your email and what you write. | Answering you. |
We do not ask for, and ask you not to send us, sensitive information such as government ID numbers, financial account numbers or health details. Where the law requires a legal basis, we rely on your consent (the email list and analytics cookies), on running something you asked to take part in (the contest, the server), and on our legitimate interest in keeping things secure and fair.
Crediting someone? When you give us a crew member's handle, you confirm they know and agreed to be named. Their handle appears on the Guest Pass page described in section 5.
3. Cookies and on-device storage
Analytics cookies are set only if you allow them. When you first visit, a popup asks whether we may use Google Analytics. Until you tap "Accept analytics", Google's analytics script does not load and no analytics cookie is set. "Decline" is just as easy, the site works exactly the same either way, and you can change your mind any time from a "Cookie settings" link or the panel below. If your browser sends Global Privacy Control, we treat that as a no and never ask. We ask again after 12 months.
Cookies (only with your consent)
| Cookie | Set by | Used for | Lasts |
|---|---|---|---|
_ga | Google Analytics | Telling one browser's visits apart, with a random number | 2 years |
_ga_… | Google Analytics | Keeping track of the current visit | 2 years |
Google Analytics is set up with advertising features, Google signals and ad personalization switched off, so this data is not used for ads.
On-device storage (always on, because features need it)
The site also uses your browser's local storage, which stays on your device and is never sent to us automatically, for a few things that make features you asked for work. They are not used for tracking:
| Saved item | What it holds | Used for |
|---|---|---|
punx_file | Your role and file number from the initiation | "Welcome back" on your next visit |
punx_code, punx_code_seen_… | Your personal signal code | Your share links and your link into the Discord room |
punx_carried | Which of the final three actions you completed | Showing what you already carried |
punx_passport | Your Passport number (PP-XXXXXX) after an entry | Keeping one Passport across your two entries |
punx_consent | Your cookie choice and when you made it | Remembering your answer for 12 months |
Third parties on page load. The initiation page loads one handwriting typeface from Google Fonts, so Google receives your IP address and browser details when that page loads (Google's privacy policy). Every other font is hosted by us. If you allow analytics, Google Analytics loads and receives the data described in section 2 (how Google uses it). When you join the email list, your sign-up is sent to Kit, our email provider. Nothing else on the site contacts a third party until you click a link to Instagram, TikTok, Spotify, Apple Music, SoundCloud, YouTube or Discord. Those sites then apply their own privacy policies.
Your privacy choices on this device
Saved here right now: checking…
Analytics cookies: checking…
Global Privacy Control: checking…
Clearing only affects this browser. Your Passport still exists; open it again with its PP number.
4. The Discord server and the Archivist
Discord stores your account and your messages under its own privacy policy. Our bot, the Archivist, keeps a small record on our contest server (hosted by Cloudflare):
- Your Discord user ID and username, your personal invite link, how many people joined through it, which hidden words you found, and whether you opted in to bump reminders.
- Your Passport number and stamps, and the casting files you post with
/casting-file(for the Friday roll call). - Collab calls you post with
/crew-calllive in Discord like any other message.
The Archivist is an AI character. When you use a talking command (/ask, /clue, /casefile, /reframe, /icebreaker, /observe, /read-the-room or "Ask the Archivist"), what you type goes to our AI provider, Anthropic, to write the answer. /observe also sends your own recent messages in that channel, /read-the-room sends the channel's recent messages, and "Ask the Archivist" sends the message you pointed it at. For /read-the-room, names are replaced with labels like "Member A" before anything is sent. We keep your last few exchanges for up to 2 days so the Archivist can follow a conversation, then delete them automatically. Do not send the Archivist anything private. Its answers can be wrong, and it never judges contest entries.
The Sunday fit pick reads reaction counts on posts in #fit-archive. The bot does not read or store other channel messages.
See or erase it yourself: type /my-data in the server to see what the bot keeps about you, and /my-data delete:true to erase it.
5. What is public by design
- Your contest entry is a public post on Instagram or TikTok, and we may repost it with credit as the official rules describe.
- Casting files, collab calls, Passport stamp announcements, editorial features and the Friday roll call are visible to members of the Discord server.
- A Guest Pass page (punxarmy.com/pass/…) shows the entrant's handle and the crew member's handle to anyone who has the link. These pages are not listed in search engines, and an unclaimed pass stops showing either handle after 21 days.
- A Passport page (punxarmy.com/passport/…) shows its stamps and handle to anyone with the Passport number. It is not listed in search engines.
6. Who helps us run things
We share personal information only with service providers that handle it for us under their terms, and only as much as they need:
| Provider | What they do for us |
|---|---|
| Netlify | Hosts punxarmy.com and keeps a backup copy of email sign-ups |
| Cloudflare | Runs the contest server and the Discord bot, and stores contest entries, Passports and bot records |
| Kit (ConvertKit) | Stores the email list and sends our emails |
| Discord | Hosts the server |
| Anthropic | Writes the Archivist's answers to talking commands |
| Google Fonts | Serves one typeface on the initiation page |
| Google Analytics | Measures how the site is used, only for visitors who allow it |
| Contest judges | See entry content only (handle, post, look details), never follower counts or other metrics |
We may also disclose information if the law requires it, to protect someone's safety, or to investigate fraud or abuse of the contest. If PUNX ARMY is ever transferred to someone else, this policy goes with it.
7. How long we keep it
| Data | Kept |
|---|---|
| Hashed connection address on an entry | 30 days, then cleared automatically |
| Daily rate-limit counters | 7 days |
| Messages to the Archivist's talking commands | 2 days |
| Roll-call records of casting files | 90 days |
| Contest entries and Guest Passes | Until about a year after the winner is announced (November 2027), then deleted automatically. The winner's entry and paperwork are kept as long as the law requires. |
| Passport and stamps | Until you delete them (/my-data delete:true) or ask us to |
| Email list | Until you unsubscribe or ask us to delete you |
| Google Analytics data | 14 months, then deleted by Google automatically |
| Hosting request logs | As set by Netlify and Cloudflare, usually days to weeks |
8. Your rights and choices
- See it: ask what we hold about you, and get a copy.
- Fix it: ask us to correct anything wrong.
- Delete it: ask us to delete it. In Discord,
/my-data delete:true. A contest entry can be withdrawn by email; once judging has started, a withdrawn entry is simply not judged. - Stop emails: every email has an unsubscribe link.
- Take back consent at any time, without affecting anything done before.
Email booking@punxarmy.com with the subject "Privacy request". We may ask you to confirm the request comes from you (for example, from the account or email involved), and we answer within 30 days, or within 45 days where state law allows. Exercising a right never changes how your contest entry is judged.
9. California and other US states
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a consumer privacy law, you have the rights in section 8, and:
- We do not sell or share personal information, including for cross-context behavioral advertising, and have not done so in the past 12 months. Google Analytics runs only with your consent and with all advertising features off. We honor Global Privacy Control: if your browser sends it, analytics stays off.
- In the past 12 months we collected these categories, for the purposes in section 2: identifiers (handles, email, Discord ID, hashed address); internet activity (request data, bot command use, and site usage through Google Analytics for visitors who allow it); and audio-visual content you choose to submit (your entry post). We do not use sensitive personal information to infer anything about you.
- We will not discriminate against you for using your rights. You may use an authorized agent; we may ask the agent for proof of authorization.
- If we deny a request, you can appeal by replying to our answer; we respond to appeals within 60 days.
10. Visitors outside the US
The contest is open only to US residents, but anyone can visit the site and join the server. We are based in the United States and our providers process data in the US and other countries. If you are in the EU, the UK or another region with data protection law, you have the rights in section 8, plus the right to object to or restrict processing and to complain to your local data protection authority. Where required, our providers transfer data under recognized safeguards such as standard contractual clauses.
11. Children
PUNX ARMY is not directed to children under 13, and Discord does not allow users under 13. The contest and all collaboration channels are for adults 18 and older. If you believe a child under 13 has given us personal information, email us and we will delete it.
12. Security
The site is served only over HTTPS with strict security headers, contest entries are rate-limited and checked for automated submissions, connection addresses are stored only as salted one-way hashes, and every request to the Discord bot is signature-checked. No system is perfectly secure; if we ever learn of a breach that affects you, we will tell you as the law requires.
13. Changes
If we change this policy, we will update the date at the top. If a change matters, we will also post it in the Discord #announcements channel and, if you are on the email list, tell you by email before it takes effect.
14. Contact
[SPONSOR LEGAL NAME], [SPONSOR MAILING ADDRESS]. Email: booking@punxarmy.com.