Privacy Policy

Last updated: July 1, 2026

Overview

This Privacy Policy explains how HQ Binaural Beats ("HQBB", "we") collects, uses, and protects your information when you use our website and services (the "Service").

Information We Collect

Account information — your email, username, and optional name, provided when you register.

Payment information — handled entirely by our payment processor, Stripe. We do not see or store your full card details; we retain only a Stripe customer/subscription reference and your plan status.

Usage information — such as your play history, favorites, and listening time (used to power features and enforce free-tier limits).

Technical information — device/browser data, approximate location from your IP address, and data stored in your browser's local storage (e.g., your sign-in token and preferences).

How We Use Your Information

To provide and operate the Service; to process subscriptions and enforce plan limits; to secure accounts; to communicate with you about your account or the Service; and to improve and troubleshoot the Service.

Service Providers

We share information only as needed with providers who process it on our behalf, including:

Stripe — payment processing and subscription management.

Cloudflare (R2) and Amazon Web Services — audio storage, hosting, and database.

These providers are bound to use the information only to provide their services to us.

Cookies & Local Storage

We use browser local storage to keep you signed in and remember preferences, and essential cookies to operate the Service. We do not use third-party advertising trackers.

Data Retention

We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data.

Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing (for example, under GDPR or CCPA). To exercise these rights, contact us at the address below.

Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and hashed passwords. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email.

Contact

Questions about this Policy or your data? Contact us at [your support email].