Overview
This privacy policy explains what personal data nessnite.art ("we", "Ness Nite") collects when you use this site, why we collect it, how long we keep it, and what rights you have over it.
If you have questions or want to exercise your rights, email nessnite@proton.me.
Data We Collect
When you create an account or use the site we collect:
- Account data — email address, username, profile photo, bio
- Purchase records — what you bought, when, and the amount paid (no card data — that stays with Stripe)
- Studio access — subscription status and expiry date
- Studio activity — posts you've liked, chat messages you've sent, direct messages, content reminders you've set
- Usage events — anonymised activity logs (page visits, track plays) used to improve the site
We do not collect card numbers, bank details, or government IDs. Payment processing is handled entirely by Stripe.
Why We Collect It
- Account management — to identify you, let you log in, and personalise your experience
- Purchases — to fulfil orders, send download files, and grant studio access
- Communications — to send purchase receipts, studio notifications you have opted into, and occasionally announcements
- Site improvement — to understand how the site is used and fix problems
The legal basis for processing is contract performance (purchases, account management) and legitimate interests (analytics, security).
Third-Party Services
We share data with the following services only to the extent required for them to function:
- Supabase — database and file storage (servers in the US). Hosts your account data, messages, and uploaded media.
- Stripe — payment processing. Receives your email address and purchase amount to process transactions.
- Shopify — merchandise store. If you make a merch purchase, Shopify processes your order and shipping details.
- Resend — transactional email delivery. Receives your email address to send receipts and notifications.
- Vercel — site hosting and analytics. Collects anonymised performance data (no cookies, no cross-site tracking).
None of these services are authorised to use your data for their own marketing purposes.
Emails & Marketing
We send two types of email: transactional (purchase receipts, download links) and marketing (studio content drops, announcements). Transactional emails are sent regardless of preference because they are directly related to your purchase.
You can unsubscribe from marketing emails at any time using the unsubscribe link at the bottom of any marketing email, or by emailing nessnite@proton.me.
How Long We Keep Your Data
- Account data — kept until you delete your account
- Purchase records — kept for 7 years for tax and legal compliance, even after account deletion
- Chat and DM messages — kept until you delete your account
- Usage events — retained for 12 months then deleted
Your Rights
Under GDPR and similar laws you have the right to:
- Access your data — download a full copy of everything we hold from your Settings page
- Delete your account — permanently erase your account and all associated data from your Settings page
- Correct your data — update your username, bio, and profile photo in Settings at any time
- Withdraw consent — unsubscribe from marketing emails via any email footer link
- Lodge a complaint — contact your local data protection authority (e.g. the ICO in the UK) if you believe we have misused your data
To exercise any right not covered above, email nessnite@proton.me. We will respond within 30 days.
Cookies & Tracking
We do not use advertising cookies or cross-site trackers. The only tracking on this site is Vercel Analytics, which is cookieless and does not build individual profiles.
We use a session cookie (set by Supabase) to keep you logged in. This cookie is strictly necessary and cannot be disabled without preventing login from working.
Security
All data is transmitted over HTTPS. Passwords are never stored — we use magic-link email login only. Your data is stored on Supabase infrastructure with row-level security policies ensuring users can only access their own data.
Changes to This Policy
If we make material changes to this policy we will update the date at the top of this page. Continued use of the site after changes are posted constitutes acceptance of the updated policy.