Stripe-hosted payment handling
Customer subscriptions use Stripe. Phantom receives subscription status and identifiers needed to manage access, but does not store full card numbers.
ACCOUNT PROTECTION
How Phantom protects customer access.
A clear summary of payment security, account sessions, Discord linking, licence data and customer privacy controls.
Sessions and email 2FA
Customers can review signed-in sessions, sign out other browsers and enable one-time email codes from the Security Centre.
Limited account linking
Discord linking is used to identify the customer and synchronise the separate Verified Member and paid Phantom Access roles.
Export and deletion requests
Signed-in customers can export a copy of their account information and submit a deletion request for Owner review.
Owner and Co-Owner controls remain restricted
The admin website is only for the Owner and Co-Owner. High-impact actions require re-authentication, a reason and typed confirmation, and are written to the audit trail.