PRIVACY POLICY

01SUMMARY

We collect what we need to run accounts, deliver purchases, host creators' work and keep the site secure. We don't sell your data, and we don't use advertising or third-party analytics trackers.

02WHAT WE COLLECT

• Account: username, email address and a securely hashed password.
• Sign-in session: one essential cookie (playrs_session) that keeps you signed in.
• Preferences: your light/dark theme and whether you've seen the email signup, stored in your own browser (local storage), not on our servers.
• Email list: if you sign up, your email address and which page you signed up from.
• Purchases: what you bought, when, and the Stripe checkout reference, linked to your account. Card details are handled entirely by Stripe.
• Shipping: for physical orders, the name and address you give Stripe at checkout, used to ship your order.
• Creators: application details (name, about, links), posts and images you publish, and the domain you verify.
• Technical: IP addresses and basic request logs, used for security, rate limiting and troubleshooting.

03HOW WE USE IT

• to run your account and deliver what you've bought;
• to ship physical orders and handle support, refunds and fraud prevention;
• to send updates you asked for (the email list); you can opt out any time;
• to host, display and promote creators' published work;
• to keep the Services secure and working.

04WHO WE SHARE IT WITH

Only service providers that help us run the Services: Stripe (payments and checkout), AWeber (email list delivery), shipping carriers (to deliver orders), and our hosting provider. When a creator verifies a domain, the domain name is looked up through public DNS resolvers (Cloudflare and Google). We may disclose information if the law requires it or to protect our rights and users.

05HOW LONG WE KEEP IT

• Accounts and purchase records: for as long as your account exists and as needed for legal, tax and accounting obligations.
• Email list: until you unsubscribe or ask us to delete it.
• Creator work: until the creator removes it. Removed work is held for 30 days and then permanently deleted, or deleted immediately on the creator's request (see Creator Terms).
• Server logs: rotated automatically, generally within about two weeks.

06YOUR RIGHTS

You can ask us to access, correct, export or delete your personal information by emailing business@nateunlocked.com. Depending on where you live (for example, California or the EU/UK), you may have additional rights, including the right to object to or restrict certain processing. We'll respond within the time the law requires and won't treat you differently for exercising your rights.

07CHILDREN

The Services aren't directed to children under 13, and we don't knowingly collect their information. If you believe a child has given us personal information, contact business@nateunlocked.com and we'll delete it.

08SECURITY

We use encrypted connections (HTTPS), hashed passwords, access controls and limited data collection. No system is perfectly secure, but we work to protect your information and will notify you if the law requires it after a breach.

09CHANGES

We'll update this policy as the Services change and revise the date at the top.

10CONTACT

Privacy questions or requests: business@nateunlocked.com.