Privacy Policy

When you contact us

Our contact form collects your name, your email address, an optional phone number, and whatever you write in your message. You choose what to include.

When you create a member account

Joining the community requires an email address. If you create an account we also store your name, the display name you choose, any profile picture you upload, and your notification preferences. Your password is handled by our authentication provider and is stored only as a cryptographic hash — we never see it, and neither do they in readable form.

To confirm your email address we email you a single-use link. The token behind that link is stored until it is used or expires.

When you report a bug

The Site has a feedback tool. When you use it we receive your description of the problem along with technical context captured automatically: the page you were on, your browser and device type, screen size, recent errors from the page, and a snapshot of the page state. If you choose to give a name or email so we can follow up, we store those too. Please do not type anything sensitive into a bug report — that box is not the place for it.

When you simply browse

We measure how the Site is used. This measurement stores no IP address, sets no cookie, and cannot identify you. It records the page path, the site that referred you (the domain only, never the full address), your screen size band, and any campaign tags in the link you followed. The session identifier lives in your browser tab and is gone when you close it.

Your IP address

We do not store your IP address and we do not use it to work out where you are. When you submit a form we convert it into a one-way scrambled value that cannot be reversed back into an address, and we use that only to stop the same source flooding us with submissions.

We use what we collect to:

• Reply to your messages and provide what you asked for
• Create and run your member account, and send you the emails that account needs — confirmation, password reset, and any updates you have opted into
• Investigate and fix bugs you report
• Understand which parts of the Site are used, so we can make it better
• Protect the Site against spam, abuse, and automated attacks
• Meet our legal obligations

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We do not make automated decisions about you that produce legal or similarly significant effects. The one automated check we run is described next.

When you choose a public display name, we send that name — and nothing else about you — to an artificial-intelligence service run by Anthropic, which checks whether it is abusive or impersonating. The check returns an allow or refuse decision in a moment.

We keep a record of each decision. If a name is refused, we store the name itself so a human can review the decision and correct it. If a name is allowed, we do not store it in that record.

If your name is refused and you think that is wrong, contact us and a person will look at it.

The Site uses a small number of cookies, and all of them are there to make the Site work rather than to track you:

• A sign-in cookie, so you stay signed in to your account
• A membership marker, so the Site knows which parts to unlock for you
• A marker recording that you have entered the community area

We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across other websites. There is no Google Analytics, no Meta pixel, and no session-recording tool on this Site.

Because we set no non-essential cookies, there is no cookie banner to dismiss. If that changes, we will ask for your consent before it does, and update this page.

You can refuse or delete cookies in your browser settings. If you do, you will not be able to stay signed in.

Some browsers can send a "Do Not Track" signal. There is no agreed industry standard for how sites should respond to it, so we do not respond to it differently.

That is because we do not do the thing the signal is meant to prevent: we do not track you across other websites, and we have no third-party advertising or behavioural analytics on this Site. Our own measurement is anonymous and confined to this Site, as described above.

We do not sell your personal information. It reaches other companies only where they are doing something on our behalf, and only the part they need:

• Supabase — our database, sign-in system, and file storage. Holds account details, contact submissions and bug reports.
• Vercel — hosting. Serves the Site and processes requests as they pass through.
• Resend — email delivery. Receives the address we are emailing and the message, and reports back whether it arrived.
• GoHighLevel — the customer-relationship system where our team follows up on enquiries. Contact form submissions are copied to it.
• Anthropic — the display-name screening described above. Receives the name only.

We may also disclose information where the law requires it, or where it is necessary to protect someone's safety or the integrity of the Site. If Go Beyond Studios is ever involved in a merger, acquisition, or sale of assets, information may transfer as part of that, and we will say so on this page.

We are being specific here rather than saying "as long as necessary", because that phrase tells you nothing.

• Bug reports are deleted automatically on a schedule.
• Account information is kept for as long as your account exists. Ask us to close it and we remove it.
• Contact enquiries, email delivery records, and our anonymous usage measurements are currently kept indefinitely. We have not yet set an expiry on these, and we would rather tell you that than imply otherwise.

If you ask us to delete something, we do not wait for a schedule.

Access to the database is restricted at the database itself, not merely in the application, so a mistake in our code cannot expose one person's data to another. Administrative screens require a separate sign-in. Traffic to the Site is encrypted in transit.

We run automated security checks against the live Site every day and review what they find.

No system is perfectly secure and we will not claim otherwise. If we ever discover a breach affecting your information, we will notify you as the law requires.

Depending on where you live you may have the right to see the personal information we hold about you, correct it, have it deleted, object to how we use it, or withdraw consent you previously gave.

Wherever you live, we will honour those requests. Here is the honest process, because a policy that lists rights without a route to them is not much use:

• Some of this you can do yourself. Signed-in members can change their name, display name, profile picture, email address and notification preferences from their account settings.
• For anything else — a copy of your data, or deletion — email us through the contact page and say what you want. A person handles it by hand. We may need to check you are who you say you are first.
• We aim to respond within 30 days.

Asking us to delete your information does not cost you anything and we will not treat you differently for asking.

The Site is meant for a general audience and is not directed to children under 13. We never ask for anyone's age or date of birth, and we hold no such information about anybody.

If we learn that a child under 13 has given us personal information, we delete it. If you believe that has happened, contact us and we will act on it.

Go Beyond Studios is based in the United States, and the information we hold is processed there and by the providers listed above. If you use the Site from elsewhere, your information will be transferred to the United States, where data-protection law differs from your own.

We do not target our services to people in the European Union or the United Kingdom.

We update this page when what we do changes — not on a schedule. When we do, the "Last updated" date above changes with it, and anything significant will be called out on this page.

Questions about this policy, or about anything we hold on you, go through our contact page. A real person at Go Beyond Studios will answer.