Privacy Policy

When you create an account, we collect your email address and a name (required by the authentication system). We do not collect your full legal name, phone number, address, or payment method directly — all billing is processed by Stripe and we never see your card details.

We store records of your subscription status, plan tier, and favorites (sessions and frequencies you have saved). We do not log which sessions you play, how long you listen, or what content you consume.

AuricleDrift uses localStorage in your browser to store your Daily Manifestation check-in streak and custom frequency presets. This data never leaves your device and is not transmitted to our servers.

Your email is used solely to: - Authenticate you to your account - Send transactional emails related to your subscription (receipts, cancellation confirmations) - Reset your password if requested

We do not send marketing emails unless you explicitly opt in. We do not sell, rent, or share your personal information with third parties for advertising purposes.

AuricleDrift uses session cookies to maintain your authenticated state. These cookies contain a session token — not personally identifying information — and expire when your session ends or after a reasonable idle period.

We use localStorage (in your browser only) for: - Your Daily Manifestation check-in dates and streak count - Custom frequency presets you create in the Frequency Lab

None of this local data is transmitted to our servers. Clearing your browser storage will reset this data.

We do not use third-party analytics cookies, advertising cookies, or fingerprinting technologies.

Subscription payments are processed by Stripe, Inc. When you subscribe, you are redirected to a Stripe-hosted checkout page. AuricleDrift never sees or stores your card number, CVV, or billing address.

Stripe's privacy policy governs how they handle payment data: https://stripe.com/privacy

We receive from Stripe only a confirmation of payment, your subscription plan, and a customer ID used to manage your subscription status. We store only the subscription status (free / drift / drift-pro) in our database.

Active accounts: We retain your email, name, and subscription status for as long as your account is active.

Deleted accounts: If you close your account, we delete your personal data from our database within 30 days. Anonymized aggregate data (e.g., total subscriber counts) may be retained indefinitely.

You may request deletion of your account and all associated data at any time by emailing us.

Your password is hashed using Argon2id before storage — we never store plaintext passwords and cannot recover or view them.

All data transmission is encrypted via TLS. Our database is hosted on Neon (PostgreSQL), a SOC 2 certified provider with encryption at rest.

We do not store session audio, binaural beat recordings, or any media. All audio is synthesized in your browser in real time.

Depending on your jurisdiction, you may have the right to: - Access a copy of the data we hold about you - Request correction of inaccurate data - Request deletion of your data - Withdraw consent at any time (by closing your account) - Lodge a complaint with a supervisory authority (EU/UK users)

To exercise any of these rights, contact us at the email address listed in Section 9.

AuricleDrift is intended for users aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe a minor has created an account, please contact us and we will promptly delete the account.

For privacy questions, data access requests, or account deletion, contact: privacy@auricledrift.com

We aim to respond to all requests within 5 business days.

We may update this policy periodically. We will notify subscribers via email of any material changes at least 14 days before they take effect. Continued use of AuricleDrift after that date constitutes acceptance of the updated policy.

This policy was last updated: August 2026.