1. Who we are
Leylines is made by Cybermoon LLC. This policy describes what data the Leylines plugin, the Leylines web services, and this website collect, why, and what happens to it. [PLACEHOLDER — entity details, registered address, and data-controller designation to be completed by counsel.]
2. Data we collect
2.1 Email address (license & sign-in)
We collect your email address when you join the waitlist, purchase a license, or sign in to your account. Sign-in uses magic links sent to your email — we never store a password. Your license file is delivered to this address.
2.2 Machine fingerprint hash (activation)
When you activate Leylines on a machine, the plugin computes a one-way hash derived from machine characteristics and sends it to our activation service. We store the hash — not the underlying hardware details — to enforce per-license activation limits and let you deactivate machines from your account dashboard.
2.3 Peer-to-peer connectivity (WebRTC)
Leylines sessions connect peer-to-peer by default. As with any peer-to-peer technology, peers in the same session can see each other's IP addresses — this visibility is mutual and inherent to direct connections. Only join sessions with people you trust. When a direct connection is not possible, traffic may pass through a relay we operate; relay servers forward encrypted traffic and are not a listening point for your audio content. [PLACEHOLDER — connection-metadata logging scope to be specified.]
2.4 Optional cloud chunk storage (Cloud tier)
If you subscribe to the optional Cloud tier, audio chunks from your sessions are stored with our storage provider so offline collaborators can catch up. Cloud-stored chunks are retained while your subscription is active; after your subscription ends they are scheduled for deletion. [PLACEHOLDER — exact post-subscription deletion window to be set by counsel and engineering; no specific window is promised in this draft.]
2.5 Payments
Payments are processed by Stripe. We receive transaction metadata (amount, product, billing country) but never see or store your full card details.
2.6 Website & diagnostics
[PLACEHOLDER — describe any analytics, crash reporting, and server logs actually enabled at launch, with retention periods.]
3. How we use data
- Deliver and activate the license you purchased.
- Operate session connectivity, relays, and optional cloud sync.
- Send transactional email (receipts, magic links, license files).
- Prevent fraud and enforce license limits.
- [PLACEHOLDER — marketing communications basis and opt-out.]
4. Subprocessors
We share data with the following service providers:
- Cloudflare — hosting, edge network, and cloud storage.
- Stripe — payment processing.
- Resend — transactional email delivery.
[PLACEHOLDER — full subprocessor list with locations and DPA status.]
5. Data retention
Account and license records are kept while your license is active. Cloud-stored audio chunks are retained while you are subscribed to the Cloud tier. [PLACEHOLDER — retention schedule table to be completed by counsel.]
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. [PLACEHOLDER — GDPR / UK GDPR / CCPA rights sections and lawful bases to be completed by counsel.]
7. Security & breach notification
We use industry-standard measures to protect data in transit and at rest. If a breach affects your personal data, we will notify affected users and regulators as required by law. Report suspected security issues to [email protected]. [PLACEHOLDER — notification windows per jurisdiction.]
8. Children
Leylines is not directed at children. [PLACEHOLDER — minimum age by jurisdiction.]
9. Changes to this policy
We will post changes here and update the "Last updated" date. Material changes will be announced by email where required.
10. Contact
Privacy questions: [email protected].