Privacy Policy

Draft. To be reviewed before accounts open to the public. Last updated [DATE].

ArmZ (“we”) runs this website and the optional HEARASIDE account. This page says what we keep, why, and what you can do about it, in line with Thailand’s Personal Data Protection Act (PDPA).

The short version

  • The plug-ins work without an account. Nothing below applies if you never sign in.
  • We never store any audio. Listen links and friends’ voices go straight from your Hub through a Cloudflare tunnel, never through this website.
  • We keep only what an account needs, and you can download or delete it at any time.

What we keep

| What | Why | |---|---| | Email address | to sign you in, confirm it’s you and reset your password | | Display name, username, photo, “about you” | shown to friends who join your room | | Language | for this website and our emails | | Devices: computer name, DAW, operating system, plug-in and version, when it was last used | so you can see and sign out plug-ins in Account › Devices | | Permanent links (a fingerprint of the token, not the token) | so your links stay the same between streams and you can revoke them | | Saved friends (names only) | to invite the same people again | | Appearance settings and stem names, if you switch on Sync appearance | so they follow you to every computer |

We do not keep: audio, track names, project files, or what you stream. The plug-ins never send these.

Who else handles it

  • Supabase (Singapore): database, sign-in and profile photos.
  • Vercel (Singapore): this website and its API.
  • Upstash (Redis): the short-lived address of your Hub for permanent links.
  • Resend: the emails we send (confirmation, password reset).
  • Google or Discord, only if you choose to sign in with them.
  • Cloudflare Turnstile: checks that a sign-up isn’t a bot.

We don’t sell your data and we don’t use advertising or tracking cookies. If we measure visits, it’s without cookies and without your email.

Your choices

  • See and change your details in Account settings.
  • Download my data: a JSON file with everything above.
  • Delete account: signs out every plug-in, revokes your links and removes your photo straight away. Everything else is deleted within 30 days.
  • Hide your email on screen (on by default in the plug-ins) for when you share your screen.

Contact

[CONTACT EMAIL]