Privacy policy

1. Information we collect

Depending on how you use the Service, we may collect:

• Account information: your email address, account confirmation status, sign-in sessions, and email preferences. We use magic links and do not ask you to create a password.
• Billing information: Stripe customer and subscription identifiers, plan, status, and billing email. Payment card details are provided directly to Stripe and are not stored by us.
• Native application authorization: authorization grants, token records, requested permissions, and entitlement status needed to sign in to cairn and confirm access to subscribed features.
• Support information: your name, email address, selected topic, and message when you contact us.
• Sounds content: audio, titles, descriptions, credits, licensing information, and other material you choose to submit or share if those features are offered.
• Technical information: IP address, browser and device information, request metadata, and security or error logs generated when you use the Service.

cairn is designed to process your recordings on your own computer. Your source audio and generated project files are not uploaded to two bit machine unless you separately choose to submit or share something through an offered Service feature.

2. How we use information

We may use information to:

• provide, secure, maintain, and improve the Service;
• create accounts, authenticate users, and manage native application access;
• process subscriptions and provide downloads and billing support;
• respond to support requests and communicate about your account;
• send release notes, product updates, and studio news when you have chosen to receive them;
• detect fraud, abuse, security incidents, and violations of our Terms; and
• comply with legal obligations and protect our rights and users.

Depending on where you live, we process information to perform our agreement with you, with your consent, for our legitimate interests in operating and securing the Service, and to comply with law.

3. How we disclose information

We may disclose information to service providers that help us operate the Service, including Fly.io for application hosting, Neon for database hosting, Stripe for billing, Resend for email, and Cloudflare R2 for release downloads. These providers process information under their own terms and privacy commitments.

We may also disclose information when required by law, to protect the rights and safety of two bit machine or others, in connection with a business reorganization or transfer, or at your direction. We do not sell your personal information.

4. Public and shared Sounds content

Content you choose to publish through Sounds may be visible to other users or the public together with the name, credit, description, and license you provide. Other users may be able to listen to, download, or use that content according to the controls and license displayed with it. Do not publish personal information or audio you do not want shared.

5. Cookies and local storage

Our website uses cookies needed for security, sessions, sign-in, and requested features. If you choose to stay signed in, we use a longer-lived remember-me cookie. We also store your light or dark theme preference in your browser’s local storage.

We do not currently use advertising cookies. If we introduce optional analytics or marketing technologies, we will provide notice and choices where required. Services you visit through links from our site, including Stripe, may use their own cookies under their own policies.

We use Ketch to present and record cookie and privacy choices appropriate to your location. Ketch may process technical information such as your IP address, browser information, jurisdiction, and saved choices in order to provide that service. You can reopen its controls at any time using “cookie choices” in the footer.

6. Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain account and transaction records, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by type of information. Information may remain for a limited period in backups after deletion from active systems.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, use, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

You may update your account email and News preference from Account settings and manage or cancel a subscription through Stripe’s Customer Portal. Marketing messages will include an unsubscribe option.

Depending on your location, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. To make a request, use our help page. We may need to verify your identity before completing a request.

9. International processing

We and our service providers may process information in the United States and other countries. Those countries may have data-protection laws different from the laws where you live.

10. Children’s privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy and update the date above. If a change is material, we may provide additional notice where appropriate.

12. Contact us

Questions, concerns, or privacy requests may be sent through our help page .