Privacy Policy
Last updated: July 1, 2026
Overview
This Privacy Policy explains how HQ Binaural Beats ("HQBB", "we") collects, uses, and protects your information when you use our website and services (the "Service").
Information We Collect
Account information — your email, username, and optional name, provided when you register.
Payment information — handled entirely by our payment processor, Stripe. We do not see or store your full card details; we retain only a Stripe customer/subscription reference and your plan status.
Usage information — such as your play history, favorites, and listening time (used to power features and enforce free-tier limits).
Technical information — device/browser data, approximate location from your IP address, and data stored in your browser's local storage (e.g., your sign-in token and preferences).
How We Use Your Information
To provide and operate the Service; to process subscriptions and enforce plan limits; to secure accounts; to communicate with you about your account or the Service; and to improve and troubleshoot the Service.
Service Providers
We share information only as needed with providers who process it on our behalf, including:
Stripe — payment processing and subscription management.
Cloudflare (R2) and Amazon Web Services — audio storage, hosting, and database.
These providers are bound to use the information only to provide their services to us.
Cookies & Local Storage
We use browser local storage to keep you signed in and remember preferences, and essential cookies to operate the Service. We do not use third-party advertising trackers.
Data Retention
We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data.
Your Rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing (for example, under GDPR or CCPA). To exercise these rights, contact us at the address below.
Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit and hashed passwords. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them.
Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated through the Service or by email.
Contact
Questions about this Policy or your data? Contact us at [your support email].