Privacy Policy

Account data. Your email address, username, display name, password hash, and the invite code you used.

Membership and payment data. Which creators you subscribe to and the status of those subscriptions. Stripe handles card details. Lossless never sees your card number.

Content and activity. Recordings, charts, posts, comments, playback positions, and standard server logs (IP address, browser, pages requested).

How you found us. If you arrived through a shared link or an ad, we keep the campaign parameters from that first visit (such as utm_source or an ad click id) so the creator who invited you can see that their link worked.

To run the Service: sign you in, deliver what you subscribed to, send account email such as verification codes, and keep the platform secure.

To tell creators how their audience is growing. Creators see membership totals and, if they connected their own tools (below), are notified when you join, subscribe, or cancel.

We use these processors to run Lossless: Stripe (payments), Mux (video), Cloudflare (file storage), Resend (email delivery), Vercel (hosting and anonymous page analytics), and Sentry (error reporting, with personal data removed).

Creator-connected tools. Creators may connect their own email list (Kit) and ad measurement (Meta, Google) to their pages. If you agreed to marketing at sign-up, Lossless may send that creator's tools your email address and membership status. Ad platforms receive only a hashed form of your email, never the address itself. You can withdraw this at any time in Settings under Email Channels. Creators' measurement scripts run in your browser only if you allowed cookies below.

We do not sell personal data. We disclose it only when the law requires or to protect the Service and its users.

Essential. The session cookie that keeps you signed in, a short-lived cookie that carries your invite code through sign-up, and the cookie that remembers your answer to the cookie banner.

Attribution. A first-visit cookie (90 days) holding the campaign parameters from section 1. It contains no personal data and is read once, when you create an account.

Marketing (optional). Creators' Meta Pixel and Google Analytics tags on their own pages. These set their own cookies and load only after you choose “Allow all”.

Change email preferences in Settings under Email Channels, or use the unsubscribe link in any newsletter. Delete your account in Settings under My Account. This removes your profile, content, and the data above within 30 days, except records we must keep for tax or fraud prevention.

If you are in the EU, UK, or California, you may also request a copy of your data or object to processing by email.

Account data is kept as long as your account exists. Server logs and error reports are kept for 30 days. Creator secrets stored on Lossless are encrypted at rest.

Questions about this policy can be sent to support@lossless.fm.