Privacy Policy
Last updated: 20 June 2026
This Privacy Policy covers the Nitestore website at nitestore.xyz and the Nitestore iOS mobile app (together, “our services”). The data controller is Nitestore. Contact us at support@nitestore.xyz with any questions about this policy or your personal data.
1. Information We Collect
We collect personal information you voluntarily provide when you create an account, make a purchase, use the community, upload audio files, book music services, or use the Nitestore iOS app. Data we collect may include:
- Name and email address
- Payment information — processed by Stripe; we never store your card details
- IP address and device/browser details (website only)
- Device push notification token (iOS app only)
- Magic link authentication tokens — temporary, expire after single use
- Purchase history and download tokens
- Community posts, reactions, and replies (visible to all logged-in users)
- Audio files uploaded for music services (WAV, AIFF, ZIP stems — deleted automatically after 14 days)
- App usage data (screen views, feature interactions)
- Service order details and delivery status
2. Nitestore Gate
When you use Nitestore Gate to create gated links, Nitestore acts as a data processor on your behalf. The following fan data may be collected through your gates and is controlled by you, the gate creator — not by Nitestore:
- Email address
- Completion status and step attempts
- OAuth tokens (if a social login step is used)
- Country of origin
Gate analytics — including views, unique views, conversion rates, and country breakdowns — are visible to the gate creator only. We do not use gate-collected fan email addresses for Nitestore’s own marketing. Gate creators are responsible for their own GDPR and data protection compliance regarding fan data collected through their gates.
Where gate creators have enabled music submission steps, subscriber music may be featured on Nitestore’s public underground music charts. No personally identifiable fan information is displayed publicly — only artist and track data.
Gate fan data is not deleted when a creator deletes their Nitestore account.
3. Community
Posts, reactions, and replies you make in the Nitestore community are stored and visible to all logged-in Nitestore users. Your display name appears alongside your posts. You can delete your own posts at any time from within the app or website. Community data is associated with your account and deleted when your account is deleted.
When you share YouTube, SoundCloud, or Spotify links in the community, those services may collect data when the content is loaded — refer to their respective privacy policies.
4. Mobile App (iOS)
The Nitestore iOS app collects the same personal data as the website where applicable. The following applies specifically to the app:
- Push notification tokens are collected to send order updates, service delivery notifications, community replies, and mentions. You can disable push notifications at any time in iPhone Settings → Notifications → Nitestore.
- No location data is collected.
- No microphone, camera, or contacts are accessed.
- The app does not use cookies or advertising trackers of any kind.
- YouTube videos embedded in the community feed are served via YouTube’s iframe player — YouTube’s privacy policy applies to video playback.
5. Music Services
When you book a mixdown, mastering, track feedback, or 1-1 lesson, you may upload audio files (WAV, AIFF, ZIP stems) through the app or website. Uploaded files are stored securely and used solely to deliver your requested service. All uploaded and delivered files are automatically and permanently deleted after 14 days. Service order details (status, notes, delivery) are retained as part of your account history.
6. How We Use Your Information
We use your personal data to:
- Provide, operate, and maintain our services, including processing orders and delivering downloads
- Authenticate your account via magic link email
- Send transactional emails (order confirmations, magic links, service delivery notifications)
- Send push notifications for order updates, service delivery, community replies, and mentions (iOS app — you can opt out at any time)
- Process and deliver music production service orders
- Power Nitestore Gate analytics for gate creators
- Feature Gate subscriber music on Nitestore’s public underground music charts
- Analyse and improve our platform
- Detect and prevent fraud and ensure security
- Comply with legal obligations
- Send marketing communications only where you have provided consent, which you can withdraw at any time
7. Cookies and Tracking
Cookies and pixel tracking apply to the nitestore.xyz website only. The Nitestore iOS app does not use cookies, advertising pixels, or ad tracking of any kind.
On the website, we use essential, analytics, and marketing cookies. Essential cookies cannot be disabled. A consent banner is shown on your first visit for non-essential cookies. Third-party tracking services used on the website include Meta Ads (Facebook Pixel) and Google Ads, which operate under their own privacy policies.
8. Third-Party Service Providers
We work with the following providers to operate our services. Each handles data under their own privacy policy:
- Stripe — payment processing — stripe.com/privacy
- Resend — transactional email delivery — resend.com/privacy
- Cloudflare — hosting, CDN, Workers, D1 database, R2 storage, KV storage — cloudflare.com/privacypolicy
- Apple — iOS app distribution and push notification delivery — apple.com/privacy
- YouTube — video playback in the community feed — policies.google.com/privacy
- SoundCloud — audio links shared in the community feed — soundcloud.com/pages/privacy
- Spotify — music links shared in the community feed — spotify.com/privacy
9. Data Security
We implement appropriate technical and organisational security measures to protect your personal information. These include encrypted data transmission (HTTPS), secure token-based authentication, automatic deletion of sensitive files, and access controls on our infrastructure. No internet transmission is completely secure and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@nitestore.xyz.
10. Data Retention
- Account data is retained while your account is active
- Purchase history and download tokens are retained as long as your account exists
- Audio service files are permanently deleted after 14 days
- Magic link tokens are deleted after use or expiry
- Community posts are retained until you delete them or delete your account
- Gate fan data is retained as controlled by the gate creator
11. Data Deletion and Your Rights
Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent. To request deletion of your account and all associated personal data, visit nitestore.xyz/account and submit a deletion request. Deletion requests are reviewed before data is removed.
Gate-collected fan emails are not deleted with your account as they are controlled by the gate creator. For any other data requests, contact us at support@nitestore.xyz.
12. International Transfers
Your data may be processed in countries where Cloudflare, Stripe, Resend, or Apple operate infrastructure. Appropriate safeguards are in place to protect your data in all jurisdictions.
13. Children’s Privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from children under this age. If you believe we have done so, please contact us immediately at support@nitestore.xyz.
14. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services after changes are posted constitutes acceptance of the updated policy.
15. Contact
For any questions regarding this Privacy Policy or your personal data, contact us at support@nitestore.xyz.