Privacy Notice

Last updated: April 27, 2026

This Privacy Notice explains how Noelle Giebe ("we", "us") collects, uses and shares personal data when you use Aether Track (the "Service"). We are the data controller for the personal data described below.

1. Personal Data We Collect

  • Account data — email address, hashed password (or OAuth provider identifier if you sign in with Google), account creation date.
  • Subscription data — subscription status, plan, billing period dates, and a customer/subscription identifier issued by our payment provider.
  • Usage & telemetry — pages visited, features used, approximate device/browser information, error logs.
  • Technical data — IP address and request metadata necessary to operate and secure the Service.
  • Support communications — messages you send us and our replies.

Payment card data is collected and processed directly by our payment provider (Paddle). We do not see or store full card numbers.

2. How We Use Personal Data

  • To create and manage your account (legal basis: contract);
  • To provide, maintain, and improve the Service (contract / legitimate interests);
  • To process payments, manage subscriptions, and issue invoices via our Merchant of Record (contract / legal obligation);
  • To prevent fraud and abuse and to keep the Service secure (legitimate interests / legal obligation);
  • To respond to your support requests (contract / legitimate interests);
  • To comply with applicable legal and tax obligations (legal obligation).

3. How We Share Personal Data

  • Service providers (subprocessors) — hosting, database, authentication, analytics, and error monitoring providers acting on our instructions.
  • Merchant of RecordPaddle.com Market Limited processes your payments, manages subscriptions, calculates and remits sales tax, and issues invoices. See the Paddle Privacy Policy.
  • Professional advisers — legal, tax and accounting advisers where necessary.
  • Authorities — where required by law, regulation, or valid legal process.

We do not sell your personal data.

4. International Transfers

Your data may be processed in countries other than the one you live in, including in the United States and the European Economic Area. Where required, we and our subprocessors rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep account data for as long as your account is active. Subscription, billing, and tax records are retained for the period required by applicable law (typically 6–10 years). Logs and telemetry are retained for a shorter period (up to 12 months) and then deleted or anonymized.

6. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, to withdraw consent, and to lodge a complaint with your local data protection authority. To exercise these rights, email us at loaftechnologies@proton.me.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege database policies, to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.

8. Cookies & Local Storage

We use a small number of strictly necessary cookies and browser storage items to keep you signed in and remember your map preferences. We do not use advertising cookies. Our payment provider may set cookies on the checkout page in order to process your transaction.

9. Children

The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes

We may update this Notice from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated through the Service.

11. Contact

For privacy questions or to exercise your rights, email loaftechnologies@proton.me, or contact our payment provider via paddle.net for billing-related privacy matters.