Your privacy.

Information we process.

Account information includes your email address, authentication identifiers and session information. Billing information includes Stripe customer, subscription, checkout and payment identifiers and verified membership, refund or dispute status. Stripe handles payment-card details; our application does not store full card numbers.

Saved configurations include shader settings, names, supported remote image references and timestamps. Export history records the shader, requested format and time, not the generated code or embedded images. An export request may be a preview or a canceled browser download; history alone does not establish that a file was saved.

Hosting, authentication, security and email providers process technical information such as IP addresses, request metadata, device/browser information, delivery information and operational logs. Support messages contain the information you choose to send. Do not email full payment-card details or passwords.

Why we use information.

We use information to authenticate you, restore sessions, save and retrieve configurations, verify paid access, generate requested exports, manage subscriptions, respond to support requests, prevent abuse, troubleshoot failures and comply with legal obligations. We do not sell account information or use saved configurations for targeted advertising.

Where applicable law requires a legal basis, providing the requested service relies on our agreement with you; security and service administration rely on our legitimate interests; billing and legally required records support legal obligations; optional features that require consent rely on that consent. You may contact us about applicable objections or withdrawals.

Images and browser storage.

Uploaded images and local customization drafts are stored in your browser. If you request a code export containing an image, the browser sends that image to our private export function to generate the response. We do not retain those image bytes in export history or intentionally log them.

Cloud saves omit embedded image uploads with your confirmation. A remote image URL can be saved as a reference. Loading it contacts that external host, which may receive your IP address and request information under its own privacy practices.

We use browser storage for necessary authentication, saved local preferences, shader drafts and sign-in return navigation. Clearing that storage can remove local drafts and sign you out. It does not cancel a subscription or delete cloud saves.

Service providers and disclosures.

Supabase provides authentication and the application database. Netlify hosts the website and server functions, and processes contact-form submissions, including your name, email address, topic and message, so we can respond. Stripe processes payments, tax calculations and billing management. Resend delivers authentication email. GoDaddy and Microsoft 365 provide the support mailbox. These providers process information needed for their roles and may maintain their own operational or legally required records.

We may disclose information when necessary to comply with lawful requests, protect users and the service, investigate fraud or disputes, or handle a business transfer with appropriate protections. We do not make your private saved configurations public by default.

Our service providers may process information in the United States and other countries where they operate. The production database and authentication email region are in the United States. Privacy laws may differ by location; contact us about applicable transfer safeguards.

How long information remains.

Saved configurations remain until you delete them or request account deletion. Application export metadata is retained for 90 days, and processed webhook identifiers for 365 days, with daily cleanup. Rate-limit counters older than one hour are removed during request processing, with daily cleanup as a fallback.

We process verified account-deletion requests within 30 days, except billing, legal, fraud-prevention or dispute records that must remain for their applicable purpose. Payment processors, hosting logs, mail systems and backups follow their own retention schedules; deletion from the active application does not instantly remove every provider backup or legally retained record. We limit retained information to what is needed and restrict its use.

Support correspondence remains while needed to resolve the request and meet related billing, security or legal obligations. You may ask us about a specific record or request deletion when there is no continuing need.

Your choices and requests.

You can edit or delete saved configurations through your account, cancel annual renewal through Account → Manage billing, and clear local browser storage. For access, correction, a portable copy, account deletion, an objection or another applicable privacy request, email info@striktly.com. We verify ownership before disclosing or changing account data.

Rights and exceptions depend on your location. You may be entitled to complain to a relevant privacy authority. We do not require you to waive mandatory rights to use the service. Account deletion and subscription cancellation are separate actions; contact us if you need help with both.

Security, age and changes.

We use access controls, authenticated server functions, encrypted transport and service-provider safeguards appropriate to the service. No system can guarantee absolute security. Keep email access and account sessions secure and report suspected unauthorized access to support.

The service is intended for people able to enter an agreement and is not directed to children under 13. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action.

We will post material updates with a new effective date and provide additional notice where appropriate. Contact Striktly LLC at info@striktly.com with questions about this notice.