Privacy policy

Afterglow is an umbrella for projects and services that may have different operators and purposes. For each service, the person or legal entity identified in that service's privacy notice is the controller responsible for the processing described there. The notice also provides the controller's required contact details.

The service-specific notice applies alongside this policy and controls if it provides more specific information about that service. General privacy questions can be sent to hello@afterglow.sh.

The information we receive depends on the service you use. It may include account or platform identifiers, usernames, server or workspace identifiers, settings, commands, interactions, and content you choose to provide to a service. If you contact us, we also receive your contact details and the contents of your message.

If you make a contribution, Stripe collects and processes your payment details. We receive your email address and transaction information such as the contribution amount, payment status, and identifiers needed to send your confirmation, maintain records, provide support, prevent fraud, and comply with legal obligations; we do not receive your full card number.

We and our service providers may process technical and usage information such as IP address, device and browser details, timestamps, request and error logs, feature usage, and diagnostic data. We seek to collect only what is reasonably needed to provide, understand, and protect each service.

We may also receive information from a platform you use to access a service, according to your settings and that platform's rules. The service will request only the permissions it needs for its stated functions.

To provide requested features, maintain settings, administer an account where applicable, and respond to service-related requests, we process the information needed to perform our agreement with you or take steps at your request before entering one.

To secure and troubleshoot services, prevent abuse, understand reliability and performance, and maintain essential records, we process technical, usage, and related information based on our legitimate interests in operating dependable services and protecting users. We consider the effect on your rights before relying on these interests.

We process information when necessary to comply with legal obligations, respond to lawful requests, or establish and defend legal claims. We rely on consent for optional processing where consent is required, such as certain analytics or device storage. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

We do not sell personal information or use it for third-party targeted advertising.

A service may use automated systems or an external AI provider to process content when that is necessary to provide a feature you request. When relevant, the service will explain this processing before you submit the content.

We do not use your content, or permit a provider acting on our behalf to use it, to train general-purpose artificial intelligence or machine-learning models unless additional terms and a privacy notice for the service clearly tell you otherwise before submission.

We may share information with providers that supply hosting, network security, storage, monitoring, communications, payment processing, AI processing, and other infrastructure used to operate our services. Some services currently use Cloudflare for infrastructure and network security, and Stripe processes contributions. Each service-specific notice identifies the providers relevant to that service.

We require providers acting on our behalf to process information only for the services they provide to us and subject to appropriate privacy and security obligations.

A service may exchange information with a third-party platform when necessary to perform an action you request. That platform may process information under its own privacy policy when it acts independently from Afterglow.

We may disclose information when required by law, to protect users or legal rights, to investigate abuse or security incidents, or in connection with a merger, acquisition, financing, or transfer of a service. We do not share personal information for unrelated third-party marketing.

A service may use cookies or similar local storage when technically necessary to provide requested functions, maintain security, remember settings, or keep a session active. Cloudflare may process request and device information and use essential security technologies when protecting or delivering a service.

We do not use optional analytics, advertising cookies, or similar storage unless the relevant service explains their purpose and, where required, asks for consent first. A service-specific notice provides details about the technologies it uses and how long they remain active.

A service and its providers may process information in countries other than the one where you live. Where required, the controller uses a recognized transfer mechanism, such as an adequacy decision or standard contractual clauses. The service-specific notice identifies relevant providers and transfer safeguards once they are known for that service.

Retention depends on the service, information, and purpose. The controller keeps personal information only as long as needed to provide the service, maintain security and necessary records, resolve claims, and satisfy legal requirements. Each service-specific notice gives retention periods or the criteria used to determine them where practical. Some information may remain temporarily in backups or logs before deletion.

We use reasonable technical and organizational safeguards, but no internet transmission or storage system can be guaranteed completely secure.

You can stop providing new information by discontinuing use of a service or removing its access through the relevant platform. Depending on where you live, you may have rights to access, correct, or delete your personal information; restrict its processing; and receive information you provided in a portable format.

You may object at any time to processing based on legitimate interests for reasons arising from your particular situation. You may also withdraw consent without affecting earlier processing and complain to the supervisory authority responsible for your place of residence, work, or the alleged infringement.

If a service uses solely automated decision-making that produces legal or similarly significant effects, its specific notice will explain the logic involved, the likely consequences, and the rights available to you. These rights may be subject to legal exceptions, and the controller may need to verify your identity before completing a request.

We may update this policy as our projects and practices change. The latest revision date appears at the top of this page. If a change materially affects how we use personal information, we will provide reasonable notice through the affected service or another appropriate channel where practical.

To ask a privacy question, exercise a privacy right, or request deletion associated with a service, email hello@afterglow.sh.