← Hinder’s Nightclub

Privacy notice · Updated October 12, 2026

Your information

This notice describes the current website, hosting process, staff applications, interviews, photo galleries and venue access. HinderMeNot operates Hinder’s Nightclub. Other groups’ owners review applications addressed to their own group. The Terms and screening notice explain the application agreement and conduct expectations.

What you provide & why

Age declaration
The age check receives your complete birth date to calculate whether you are 18 or older, then discards that date. Applications save your declared age at submission and birth month/year, plus screening consent and agreement versions and timestamps. This is a declaration, not independent identity or age verification.
Identity & contact
Email, exact VRChat display name and supplied profile URL, Discord user ID and membership check, chosen team and role. We use these to verify email ownership, route the application, contact you and match approved venue access.
Hosting
Your group name and link/ID, ownership certification, event title and description, instance type, expected attendance, date, time and timezone. Reviewers use these to verify the host and plan the event.
Staff & interviews
Experience, availability, application status, review notes, interview schedule and arrival instructions, owner confirmation of interview completion and invitation/access timestamps. We use these to organize interviews and document hiring or other-group approvals.
Access & security
Application IDs, hashed private link/session tokens, access-code lookup hashes, grant expiries, sign-in and moderation records, rate limits and audit timestamps. Hosting-owner sign-in uses a keyed identifier derived from the application’s network address to check that private reviews originate from the same network.
Photos & posters
Image URLs you supply, enabled frame choices, processed image copies, gallery connection IDs, revision, expiry and publishing timestamps. We fetch the image from its host and generate world-ready gallery images.

Optional Discord community features

The access bot checks server membership approximately every five minutes to welcome arrivals and note departures. It keeps current Discord user IDs, display names, membership dates and the last check time. Departed members are removed from that snapshot after processing. Optional community interest roles carry no staff or paid-access permissions.

If you opt in using the Birthdays channel, we store your Discord ID, birth month and day, and opt-in time to post an annual public celebration in that channel. No birth year is collected for this feature. Remove the preference at any time using its button; it is also removed after the bot observes that you left the server. This optional preference is separate from application age declarations. Dates use America/New_York, with February 29 observed on February 28 in non-leap years.

Closed private support tickets remain read-only for the requester and venue owner/server administrators. A text transcript is archived in the restricted Transcripts channel for the venue owner/server administrators and bot. Exports include message text, author names and IDs, timestamps, and attachment links. Large exports identify their limits; the original ticket keeps its conversation. The bot refuses to archive into a channel with broader explicit viewing access.

Who can see application information

Authorized Hinder’s reviewers review hosting applications. HinderMeNot reviews Hinder’s Lounge applications. Another group’s owner sees only applications addressed to that group during its active approval window. Applicants can sign in to their own application status through a private email link. Application records are not displayed in public Discord channels or public photo feeds.

Website administrators and service providers process information as needed to run, secure and maintain the service. The current providers include Cloudflare for the website, application database and scheduled processing, Railway for the website gateway, moderation and gallery storage, Resend for transactional email, and Discord for command links, membership checks and hired-staff roles. These providers may process network addresses, request metadata and delivery logs under their own policies. Email necessarily goes through your email provider.

VRChat profile and group links refer to information users make available on VRChat. Approved ordinary venue roles are distributed through a hashed display-name roster that includes role bits and expiry, including a mirrored manifest on GitHub. Those hashes are pseudonymous, not guaranteed anonymous. Application email, age, birth month/year and interview answers are not included in that world roster. Moderation services retain the identities, reasons and access status needed to enforce venue restrictions.

Screening & decisions

Reviewers use your supplied profile, Discord identity, relevant experience and references you choose to provide. We do not run an email-based investigation to discover your private address, phone number, real name, unrelated aliases or hidden accounts. No such background investigation is part of this application process.

Email verification establishes control of an email address. It does not verify your legal identity or age. Owners make approval and hiring decisions themselves; selecting a role does not automatically grant it. Hinder’s Lounge applicants have an owner-scheduled group interview before hiring. Only hired applicants receive private Discord staff access and an owner-issued VRChat staff invitation.

Cookies, links & public content

Necessary cookies remember an adult-age declaration for up to 30 days, a restricted result for about a day, and authenticated application or photo sessions until their individual expiry. Private links and tokens verify access. The application flow uses these for sign-in and security, not advertising profiling. Infrastructure providers may maintain operational logs. Your browser sends ordinary connection metadata when it loads the website or follows an external link. The site also loads its fonts from Google Fonts, which receives the browser’s font requests and connection metadata; application answers and birth information are not included in those requests.

Anyone with a gallery connection link can view its published images until expiry. Treat that link as shareable access, keep personal or confidential information out of public galleries, and obtain permission for images you publish. When images appear in a VRChat instance, visitors may see or capture them. Image hosts and linked platforms operate under their own policies.

Retention & security

Current hosting records and their active code records are removed by scheduled cleanup after the 24-hour application window. Staff applications also expire 24 hours after submission. Scheduled cleanup deletes their contact and birth month/year fields, consent/agreement records, review decisions, linked codes, private sessions, queued email data and application audit records. Related other-group staff applications expire sooner if the host’s window ends. Orphaned interview records are removed after 24 hours. Cleanup runs every five minutes; expired applications cannot be approved or used while awaiting physical deletion.

Private application links, email verification links, sessions and grants expire separately. Staff email payloads are encrypted while queued and cleared after successful sending; application outbox rows are deleted with their application or after 24 hours. Current event galleries expire no later than 24 hours after creation or their hosting grant expiry, whichever comes first; expired gallery storage is cleaned up after an additional day. Moderation records and operational audit/security records may remain while needed for access control and troubleshooting.

Access is restricted by verified email, group scope, expiring tokens and owner network checks. Service infrastructure backups, delivery logs and messages already sent to email or Discord can remain under those providers’ retention rules; deleting a website record does not recall a delivered message. No transmission or storage system can be promised perfectly secure.

Your choices & contact

You can read the Terms, Privacy notice and FAQ without completing the website age check. Decline application review by not submitting. You can ask for access to, correction of, withdrawal of or deletion of your application information by contacting HinderMeNot privately through the official Hinder’s Nightclub Discord; for another group’s application, also contact that group owner. We may ask you to verify the request using your application email or Discord identity. Retention needed for unresolved safety, security or other applicable obligations will be explained when relevant.

Do not post your birth date, email, codes or private sign-in links publicly. If information about a minor was submitted, contact HinderMeNot privately so it can be reviewed and removed as appropriate. This website is intended for adults, and a self-declaration does not prevent every false declaration.

Production pairing information

The world keeps a bounded instance check-in roster with a 24-hour expiry. Leaving clears active staff check-in while the record remains until expiry; everyone receives the visitor menu on arrival, and Dancer/VIP options do not require check-in; closing the instance also ends its in-memory roster. The world does not upload this roster to the website or create a permanent cloud attendance history. Production sessions store the event title, VRChat instance identifier, main/VIP area, owner identity, exact Producer and broadcasting-account display names, selected screens, public playback link, expiry and pairing status. OBS sends connection, recording and streaming status, the selected effect, short control acknowledgements and the saved recording’s filename only. The website receives neither the recording nor its full PC path.

The free companion reads VRChat’s local output log to confirm the instance and recognize venue recording controls. It sends matching instance and control identifiers, not the full log or chat history. A device token is protected by Windows on the PC; the server stores its hash. OBS passwords and social-platform publishing keys remain on the PC. Anyone with the world connection link can read its limited expiry, status, instance and hashed account names. Display-name hashes are pseudonymous, not guaranteed anonymous.

Sessions end within 12 hours or earlier when the owner’s access ends. Scheduled cleanup removes production session and paired-device records seven days after ending, commands after seven days, and unapproved pairings a day after their five-minute code expires. Expired pairing-rate counters are cleared. Provider logs and backups can remain under their separate retention policies. Ending a session does not delete videos saved on the PC or posted to streaming services.

Recording, store features & changes

Recordings and livestreams are separate from application processing. Producers must notify participants, obtain the required permissions and follow the production rules. A staff application does not authorize recording. A group owner or Producer using OBS and an external streaming service manages those recordings and that platform’s data; the current application website does not automatically record interviews, harvest stream keys or store a cloud recording of your avatar.

Square payment processing and purchase terms are described below. One-time event-pass checkout is available through Square for confirmed events. Pass activation is handled manually after payment verification; monthly VIP checkout and automatic paid-access delivery are being prepared. Future cloud broadcasting or account integrations will be disclosed before collecting additional data or credentials. We will describe material changes here and obtain a new application agreement when required by a changed application process.

Future-event staffing

Hosting and staff application details, contact information and private review records are deleted after 24 hours. With owner approval, a future-event hire retains only its event association, exact VRChat display name and approved role until that event ends or is cancelled. Event metadata includes the group, event name and dates, owner VRChat name, and hashed owner email/IP information needed to keep future-event sign-in private. The owner can withdraw a scheduled hire. The public world roster contains event timing, hashed player identities and role bits; it does not publish raw staff names, email addresses or private application answers. Event rosters and their owner-access metadata are deleted by scheduled cleanup after the event ends.

Square payments & financial records

WebTech N’Go Corp., based in Akron, Ohio, United States, is the seller for Hinder’s Nightclub purchases and uses its WebTech n’Go Square account for confirmed paid services and one-time event passes; monthly VIP subscriptions are being prepared. Square hosts checkout and processes the card or digital-wallet details you submit. The Hinder’s application website and Producer Companion do not receive or store your full payment-card number, security code or banking credentials. Square’s Privacy notice explains its own processing.

Square and the seller may process your purchase email/name, billing details, payment amount and currency, tax, item/plan, invoice number, transaction and subscription identifiers, payment status, renewal/cancellation dates, receipt-delivery preferences and limited masked payment information. We use seller-accessible records to fulfill the agreed purchase, issue receipts, manage renewals and cancellation, reconcile accounting and investigate billing errors or disputes. Booking communications may include the agreed hours, appointment time and production scope. Provide payment information only through Square; never post it in public Discord.

One-time pass checkout collects your exact VRChat username, group and approved event date/time with time zone to match the purchase to your confirmed event. The seller uses those details and the Square purchase reference to verify completed payment and arrange manual access activation. Do not put your private hosting code in checkout fields. Automatic paid-access delivery is still being prepared. Payment metadata must not contain staff interview answers, birth information, private review notes, OBS passwords or stream keys. Square’s invoice/subscription email provides its purchase and management links; a receipt-email opt-out is separate from subscription cancellation.

Financial records are separate from the 24-hour staff-application cleanup. Square retains data under its own policy. Seller purchase, invoice, accounting, cancellation and dispute records may remain as long as needed for fulfillment, financial/tax obligations, fraud prevention and resolving disputes. Canceling stops future subscription billing but does not erase completed payment records. Request access, correction or deletion privately through the official venue contact; records required for continuing obligations may be retained, and we will explain relevant limits. We do not sell payment information or use receipt consent as advertising consent.

Producer Companion downloads & Microsoft Store

The Producer Companion is a free Windows desktop tool operated with Hinder’s Nightclub through WebTech N’Go Corp. Microsoft Store is the public distribution route for the free app. Its Store release is awaiting approval and publication; the website’s former direct ZIP links now lead to Microsoft Store.

When that edition is available, Microsoft distributes the app and handles its Store account, download and update services under the Microsoft Privacy Statement. Microsoft may process Store account, device and download/usage information as described there. Those records are separate from Hinder’s application and payment records.

The Companion’s desktop permission lets it read the local VRChat log, connect to local OBS and store its protected pairing token. It runs as your Windows user without administrator elevation. It extracts matching event and control identifiers locally and does not upload the full log or chat history. OBS passwords and streaming keys remain on the PC; the website receives limited pairing, instance and output status as described above. Removing the Companion does not delete OBS recordings or cancel a Square subscription. Optional paid setup assistance is separate from the free app.

Consented member accounts, receipts and welcome emails

When you register after approval, you separately consent to retain your hosting approval reference, approved group, exact VRChat name, bound Discord account/username, verified email, account status and activity. Email and contact profile are encrypted in storage; an email hash supports matching. The approval copy omits private application answers, birth dates, interview material and review notes. Existing private hosting/staff application details still expire after 24 hours; the minimal approved future staff roster retains only the event, VRChat name and role until the event ends.

Account records remain while the account is open. Verified purchase, tax, consent and receipt records are retained as needed for fulfillment, bookkeeping, disputes and legal obligations; they are not deleted with an application. Request correction or account closure through private support. Financial records that must be retained may remain after closure.

Registration, verification, applications, purchases and subscriptions generate transactional instructions and owner notices. Resend delivers venue emails; Square processes payment data and subscriptions. The website stores product, order/payment reference, amount, tax and access window, not card numbers, CVV or OBS passwords/stream keys. Server checks verify payment before issuing personal access.

The venue owner can view a private member file, organized alphabetically by VRChat name, combining the consented account, approval reference, activity and receipts. Receipt links require the owning member’s sign-in or the venue owner’s private sign-in. Other members cannot view them. Email verification tokens expire, work once and are stored as hashes; sessions use protected cookies.

Discord support tickets are visible to the requester, server owner/administrators and bot. Public General and Memories posts are visible to their channel audience; private staff discussion is restricted to hired staff. Do not include access codes, passwords, stream keys or payment-card information in tickets or public posts.

Purchase tax records

The checkout form collects the country and US state where you will use a pass, and an Ohio ZIP or ZIP+4 when applicable. The postal code is encrypted in the private purchase record. We retain the tax jurisdiction, calculation date, rate, quoted amount and verified total with the purchase and receipt for financial records. They are available only to your authenticated account and the venue owner.

The tax calculation downloads a public statewide rate table from the Ohio Department of Taxation. It does not send your postal code, name, email or payment details to that download service. Square handles payment and any billing details you enter there. Private application answers retain their separate 24-hour deletion deadline.

Subscription and promotion records

We retain your verified member identity, Square customer/subscription/invoice references, plan and consent versions, tax-location quote, trial eligibility, payment status, cancellation and automatic-payment preferences, event schedule, access-code hashes and private receipt history. Tax postal codes, event descriptions and any opaque stored-card reference are encrypted. These account and financial records are separate from temporary applications; retaining a trial-use and first-purchase record prevents repeated free trials or coupons. Square collects card details through its secure form and stores the card; this website does not retain full card numbers or security codes. Access codes and billing updates are sent to your verified email, with owner notices filed under your VRChat member record. Billing settings and cancellation remain accessible in your account when venue services are suspended. Contact private support about access, privacy or billing.

Private codes, approved groups and code abuse

Every code is personal. Never give out, post, sell, lend or transfer an entrance, hosting, VIP or production code. Use your exact registered VRChat display name and the group approved on your hosting account. Subscribers use the same approved hosting account, with the additional features included in their tier; subscriptions do not transfer group ownership or platform permissions.

In My account → Generate your next access code, an approved regular host can request a 24-hour hosting code. A current subscriber can request a 12-hour hosting code and their tier’s separate VIP code, capped at the verified trial or paid billing end. Only one unexpired code of each kind can be issued to a recognized person. A second request is denied until the current code expires, including attempts from another account with the same verified Discord identity or VRChat name. Cancelling an event or revoking a code does not bypass its original lock expiry. Independent production passes retain their purchased time window.

Codes are tied to your registered VRChat name and stored with your approved group. Another VRChat name cannot redeem your code. Current technical limit: the installed world SDK does not expose the instance’s actual group to these keypads; group use is an enforced account/approval rule, not yet an automatic in-world group comparison. Do not use a code to open another group’s instance. Contact support before a legitimate username or group change.

Confirmed code misuse or abuse may result in a permanent Hinder’s Nightclub ban and blacklist of the associated email, VRChat username, Discord identity and group names/IDs. Creating new identities or groups to evade a ban is prohibited. Newly confirmed aliases are added to the same restriction; the system does not automatically identify an unknown person behind completely different accounts. No account deletion removes a permanent ban. Private support and restriction review.

One month to recover an unpaid subscription

One unpaid monthly renewal suspends subscription services immediately; it does not immediately remove your hosting account. You have one calendar month from the unpaid billing boundary to sign in, pay the outstanding Square invoice, manage automatic payments or unsubscribe. Verified payment within that period restores the eligible subscription and clears the recovery deadline. My account and the payment email show the exact deadline.

After the deadline, future automatic billing is stopped and the usable account, sign-in sessions, email association, usernames, group profile, codes and private member history are cleared from the active website database. The old profile cannot be restored. An independent active paid pass delays cleanup until its purchased window ends. Voluntarily unsubscribing from a current paid period does not itself trigger unpaid-account deletion.

Account loss does not prohibit a new hosting application. An unbanned applicant may use the same email with a new approved application and verify a new account. Required financial records, Square’s own records, minimal permanent-ban records and provider backup retention are exceptions to immediate deletion; the website does not promise that every copy is instantly erased forever. Ohio sales records are retained for at least four years, or longer when required. Blacklisted identities cannot create a new account to evade their restriction.

Verified staff accounts

Approved hires can create their own account with their approved staff Application ID and matching verified application email within 24 hours. If an already-hired person’s application was removed, the approving group owner can prepare an invitation in My account → Staff accounts. The hire uses /staff-account in the venue Discord to receive a private 30-minute signup link, enters an email they control, accepts account Terms/Privacy, and verifies the email. The owner does not need to know that email.

A verified staff account retains its identity and minimal approved role/group assignments separately from the application’s private answers. Hinder’s Lounge ongoing assignments last until revoked; scheduled assignments end with their event. Unclaimed recovery invitations expire after seven days. Staff accounts do not expire merely because an application expires. Staff can see their own assignments and codes; they do not receive group-owner authority, other applicants’ information or the host’s billing.

Only Super Admin staff approved to open instances can generate hosting codes. Host-paid VIP and production codes require that approving host’s active subscription or an active paid one-time pass, inherit only that tier and remaining window, and stop when the approval is revoked, payment is overdue, the host account becomes unavailable or the pass ends. Every staff member gets a separate code bound to their exact VRChat display name and approved group. No code replacement before expiry. Current world code checks the entering player’s display name; it does not verify the actual instance group ID or immutable VRChat user identity.

Private rule reports and enforcement

Reports store Discord IDs, incident and submission times, encrypted report/evidence text and reviewed findings. The server owner and authorized Discord moderators can review them privately. A report alone does not trigger punishment. First confirmed violations receive one warning; a further confirmed incident after the delivered warning triggers Discord removal and hosting-code revocation.

Warning delivery, review decisions, removal/retry status and minimal hashed identities for hosting restrictions are retained separately from the 24-hour application cleanup. Leaving or rejoining does not erase them. Private warning DMs are sent through the existing bot. The owner receives an email alert linking to the private queue. Contact private support to request correction or review.