Privacy Policy

Account information. When you sign up we collect your email address, name, and profile picture (if you sign in with Google).

Payment information. We do not store your credit card details. All payment processing is handled by Stripe. We store only a Stripe customer ID and subscription status in our database.

Usage data. We collect standard server logs including your IP address, browser type, pages visited, and timestamps. This helps us debug issues and improve the service.

Cookies. We use authentication cookies managed by Supabase to keep you signed in. We do not use advertising or tracking cookies.

We use the information we collect to:

• Create and manage your account
• Process payments and manage your subscription
• Send transactional emails (receipts, password resets, subscription notices)
• Respond to your support requests
• Monitor and improve the security and performance of our service
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data to train machine learning models or for advertising purposes.

We share data with the following sub-processors to operate the service:

• Supabase — database, authentication, and file storage (EU/US infrastructure)
• Stripe — payment processing and subscription management
• Vercel — web hosting and edge delivery
• Google — OAuth sign-in (only if you choose "Sign in with Google")

Each of these providers has their own privacy policy and is contractually required to protect your data.

We retain your account data for as long as your account is active. If you delete your account we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. billing records, which we keep for 7 years per accounting requirements).

Depending on your location you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at privacy@radarreplay.com. We will respond within 30 days.

We use industry-standard measures to protect your data: HTTPS encryption in transit, encrypted storage at rest, row-level security on our database, and access controls that limit which team members can access production systems. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Radar Replay is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Radar Replay is operated from the United States. If you are located outside the US, your data may be transferred to and processed in the US or other countries. By using our service you consent to this transfer. We rely on Standard Contractual Clauses where required for cross-border transfers under GDPR.

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of the service after changes constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us: