Privacy Policy

Short version: we collect the minimum needed to run a membership site, your email and what your membership unlocks. We never use ad trackers and never sell data.

What we collect

• Account: your email address (used for magic-link sign-in) and your membership status, stored with Supabase.
• Purchases: handled by Lemon Squeezy as merchant of record - they process your payment details and billing country; we never see your card. We receive your order status and a customer reference.
• Preferences: your theme choice, and which prompts you copied so we can ask how they built, live in your browser's localStorage and never leave it; the sign-in session is a cookie. We set no advertising cookies.
• Usage and error data: anonymous counts of how the site is used (page visits, prompt copies and clicks on locked prompts, with the country, the referring site and any campaign tag in the link), and reports of errors so we can fix them. None of it uses cookies or stores your IP address. Our own counts use an anonymous code that changes every day, and leave out browsers that send "Do Not Track" or Global Privacy Control.
• Weekly roundup emails: only if you ask for them, by ticking the box at sign-in or using the form in the footer. Your address then goes to our email provider, Brevo, for that list alone. Every email carries a one-click unsubscribe link, and we never add anyone who did not ask.
• Server logs: our host (Vercel) keeps standard request logs for security and debugging.

What we use it for

• Signing you in and keeping premium prompts unlocked for you.
• Sending magic-link emails and receipts (via our email and payment providers).
• Answering support requests.

We don't sell personal data, and we don't use it for advertising.

Service providers

These companies process data on our behalf, each under their own privacy terms. We add a provider to this list before it starts receiving any data.

• Vercel: hosting and server logs.
• Supabase: accounts and database.
• Lemon Squeezy: payments, as merchant of record.
• Brevo: sign-in emails and the weekly roundup.
• Cloudflare: email routing and page view counts.
• Sentry: error reports.

Retention & deletion

Account data is kept while your account exists. Email support@nightmarquee.com to delete your account, we'll remove your data within 30 days, except records we must keep for tax/accounting (held by the merchant of record).

Your rights

We operate from Ireland, so GDPR applies: you can request access, correction, export or deletion of your data at the address above. If you're unhappy with how we handle it, you can complain to the Irish Data Protection Commission.

Changes

Updates to this policy appear on this page with a new date.