Strangelight AudioWhat data we collect
If you create an account, Supabase Auth stores your email address, encrypted password credentials, and basic account metadata such as the display name you provide during sign-up. Within the application we store product purchase status, support tickets and support messages, notification preferences, newsletter consent records, and any public comments you choose to post on journal entries.
How we use it
We use account data to authenticate you, protect purchased-product features, and operate the customer support portal. Newsletter subscriber data is used to send optional product updates after double opt-in. After an eligible Throughline purchase, and only where the purchase review notice was shown and you did not refuse, we may send information and offers about Throughline and our own similar products and services. We do not send third-party promotions, sell personal data, or use it for third-party advertising.
Website analytics
We use PostHog to understand which pages people read and where the site confuses them. It runs in cookieless mode: it stores nothing on your device, sets no tracking cookie, and uses no local storage. Visitors are counted using a short-lived hash that PostHog generates on its own servers and rotates daily, so the analytics data cannot be tied back to you or followed across sites. Analytics requests are served from this domain and forwarded on, and data is processed in the EU. We do not use analytics data for advertising or share it with advertisers.
Processors
Customer accounts and application data are stored in Supabase. Website analytics are processed by PostHog in the EU. Transactional and newsletter emails are sent via Resend. Purchase status is derived from signed Polar webhook events and linked to your account using your Supabase user ID or verified account email. We retain limited delivery metadata and a one-way payload digest for webhook reliability; raw webhook payloads are not retained in the audit log. We maintain one canonical contact record so verified Supabase, Polar, newsletter, and Resend identities can be reconciled without discarding consent or purchase history. Identity conflicts are quarantined for review rather than guessed.
Email delivery
Emails are delivered via Resend. Your email address is shared with Resend solely for this purpose. Resend's privacy policy is available at resend.com/legal/privacy-policy. Resend Broadcast open and click tracking are disabled. We retain minimal bounce, complaint, suppression, Topic, and Segment state to deliver mail safely and honour restrictions.
Your rights
You can unsubscribe at any time using the link in any marketing email or through a confirmed website request. An opt-out or delivery suppression overrides every earlier positive marketing basis until you take a new qualifying action. You may also request access, correction, export, restriction, or deletion of your personal data by contacting us. Under GDPR you also have the right to object to processing based on our legitimate interests and to lodge a complaint with your local supervisory authority.
Retention
We retain account and support records for as long as your account remains active and as needed to provide customer support, enforce entitlements, and maintain basic security records. Newsletter consent records are retained until you unsubscribe and are deleted or anonymized on verified request unless we need to keep a minimal suppression record to honour your opt-out.
Contact
For privacy-related questions please email privacy@strangelightaudio.com.