Privacy Policy

This Privacy Policy explains how Neyrinck LLC (“we,” “us,” or “our”) collects, uses, and protects your personal data when you use Sonic Shootouts at sonicshootouts.com (the “Service”). We are the data controller for the personal data described below.

We have written this policy to align with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA (CCPA). It applies to everyone who uses the Service.

1. Information we collect

We collect only the data needed to operate the Service:

• Account data — your email address, password (stored only as a secure hash by our authentication provider), and the display name you choose.
• Content you create — shootouts you publish (titles, descriptions, copyright notices) and the audio files you upload, along with file metadata such as file name, size, and format.
• Beta sign-up data — if you join our beta or waitlist, the name, email address, and any comments you provide.
• Usage analytics — we use Vercel Analytics, a privacy-friendly, cookieless analytics tool that collects aggregated page-view and performance data. It does not build advertising profiles or track you across other websites.

We do not sell or share your personal data, we do not use advertising or tracking cookies, and we do not knowingly collect data from children under 16.

2. Cookies

We use only strictly necessary cookies. Our authentication provider sets session cookies (names beginning with sb-) so that you stay signed in, and we may set a short-lived beta_preview cookie to grant temporary preview access. These cookies are essential to provide the Service and, under GDPR and the ePrivacy Directive, do not require consent. We do not use any analytics, advertising, or tracking cookies, which is why you will not see a cookie consent banner.

3. How and why we use your data

We process your data to: create and manage your account; authenticate you and keep you signed in; host and display the shootouts and audio you publish; respond to your support and privacy requests; and understand aggregate usage so we can improve the Service.

Our legal bases under the GDPR are: performance of our contract with you (operating your account and the Service), your consent (for beta sign-ups), and our legitimate interests (securing the Service and improving it through aggregate analytics).

4. Service providers (data processors)

We share data only with vendors that process it on our behalf under contract:

• Supabase — database, authentication, and storage for your account data and uploaded audio.
• Vercel — hosting and cookieless analytics for the Service.

These providers may process data in the United States and other countries. Where data is transferred out of the EU or UK, the transfer is governed by Standard Contractual Clauses or an equivalent safeguard.

5. Data retention

We keep your account data and content for as long as your account is active. If you ask us to delete your account, we remove your personal data and uploaded content, except where we must retain limited records to comply with the law. Beta sign-up data is kept until the beta program ends or you ask us to delete it.

6. Your rights

Depending on where you live, you have rights over your personal data. Under the GDPR and UK GDPR these include the rights to access, correct, delete, restrict, or object to processing of your data, and to data portability. Under the CCPA/CPRA, California residents have the rights to know, delete, and correct their personal information, and to not be discriminated against for exercising these rights. Because we do not sell or share personal information for advertising, there is nothing to opt out of in that respect.

To exercise any of these rights — including deleting your account or requesting a copy of your data — email us at info@neyrinck.com. We will respond within the timeframe required by applicable law. You may also delete individual shootouts you have created at any time from within the Service. If you believe we have mishandled your data, you have the right to lodge a complaint with your local data protection authority.

7. Security

We rely on industry-standard measures from our infrastructure providers, including encryption in transit, hashed passwords, and row-level access controls that restrict your data to your account. No system is perfectly secure, but we work to protect your data against unauthorized access.

8. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you. Continued use of the Service after an update means you accept the revised policy.

9. Contact us

Neyrinck LLC
Email: info@neyrinck.com