Privacy Policy

1. Overview

This Privacy Policy explains what information Strands (“Strands,” “we,” “us”), operated by Nicholas Horn, collects when you use our website, create an account, or publish a profile page (together, the “Service”), and how we use, share, and protect that information. This policy should be read alongside our Terms of Service.

2. Information We Collect

Account information. Your email address and username, plus your password — which is handled and stored by our authentication provider, not by us directly.

Profile content. Whatever you choose to add to your profile page — links, text, images, embeds, and similar content — plus any information a visitor to your profile voluntarily submits back to you through it (for example, an email-signup block).

Billing information. If you subscribe to a paid plan, our payment processor collects your payment details directly — we never see or store your full card number. We keep a record of your subscription status and billing history for account management purposes.

Usage and analytics data. When your profile page is visited, we record basic event data server-side — for example, that a visit or a link click occurred, the referring site, and an approximate timestamp — so you can see how your profile is performing. We don’t use advertising cookies or third-party ad-tracking networks on the Service today.

Communications. If you contact us for support, we keep a record of that correspondence to help resolve your request.

3. How We Use Information

We use the information above to:

• Provide, operate, and maintain the Service;
• Process subscription payments and manage your account;
• Show you how your published profile is performing (visits, clicks, referrers);
• Respond to support requests and account inquiries;
• Detect, investigate, and prevent fraud, abuse, and security incidents; and
• Comply with applicable legal obligations.

4. Cookies and Local Storage

Signing in stores your session in your browser’s local storage, not a cookie. We don’t use cookies for advertising or cross-site tracking on the Service today. If that changes, we’ll update this section to describe what’s used and how to control it.

5. Your Profile Is Public

A published profile page is publicly accessible at your chosen subdomain to anyone with the link, and may be indexed by search engines, the same way any public webpage can be. Don’t publish anything on your profile that you don’t want to be publicly visible.

6. How We Share Information

We don’t sell your personal information. We share it only with:

• Service providers who help us run the Service — our cloud-hosting infrastructure provider, our authentication provider, and our payment processor — each acting on our behalf and bound to use your information only to provide those services;
• Third-party services you choose to embed on your profile (for example, a YouTube video or a Calendly scheduling page) — interacting with an embed is subject to that third party’s own privacy practices, not ours; and
• Law enforcement or other parties when required by law, or to protect the rights, safety, or property of Strands, our users, or the public.

7. Data Retention

We keep your information for as long as your account is active, and for a reasonable period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Published profile content and usage analytics are deleted or de-identified within a reasonable time after you delete your account.

8. Your Rights and Choices

You can review and update your account information at any time from within the Service, and you can delete your account, which removes your published profile and associated content. Depending on where you live, you may have additional rights over your personal information — such as the right to request access to, correction of, or deletion of the information we hold about you. To exercise any of these rights, contact us using the details in Section 12 below.

9. International Data Transfers

Our infrastructure is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home jurisdiction.

10. Children’s Privacy

The Service isn’t directed to children, and we don’t knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we’ll take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we’ll provide reasonable notice (such as an email or an in-product notice) before it takes effect.

12. Contact

Questions about this Privacy Policy, or requests regarding your personal information, can be sent to hello@strands.io.