Privacy Policy
Last updated
1. Who is responsible
Clark kHz LLC d/b/a Phase Ctrl ("we") is a Wyoming limited liability company, and is responsible for personal information collected through phasectrl.com. We are an independently owned and operated business.
We do not publish a postal address. Reach us through the contact page, or for anything covered by this policy, at privacy at phasectrl dot com.
2. What we collect, and why
We have tried to make this list exhaustive rather than illustrative.
The "Lawful basis" column is the GDPR / UK GDPR justification, and matters if you are in the EEA or the UK. US state privacy laws do not use it; your rights under those laws are in section 6 either way.
Account data
| Data | Why | Lawful basis |
|---|---|---|
| Email address | Sign-in, verification, and matching what you bought to your account | Contract |
| Password (see below) | Sign-in | Contract |
| Display name, Instagram handle, website (optional) | Personalizing the account area | Contract |
| Email verification status | Attaching purchases and demo requests made with your address before you had an account | Contract |
| Whether you accepted these terms, which version, and when | A record that you agreed to them | Contract |
| The newsletter box on your account, and when the account was created and last changed | Running the account area | Contract |
Your password. When you sign in or register with a password, your browser sends it to our server over an encrypted connection, and the server passes it straight to Firebase Authentication, which checks it or sets it and stores only a hash of it. We do not store your password or write it to any log. Signing in with Google or Apple, or with a one-time link, sends us no password at all.
The newsletter box records your answer and nothing more. Ticking it when you register asks us to email you a confirmation link, and you are on the mailing list only once you click it. Changing it later on your account page records your answer but does not by itself subscribe or unsubscribe you — see Mailing list below.
One-time sign-in links, where we offer them: when you ask for one, we keep your email address, the page to return you to, and when the link was made and used. A link lasts an hour, and the record is then deleted automatically, usually within a day.
You can delete your account yourself, from your account page, once you have signed in again to confirm it is you. That deletes your profile, your saved cart and your download history, and removes your sign-in. The record of anything you bought or asked for as a demo is kept, because we need it for our accounts, but it is no longer attached to an account: if you sign up again with the same address and confirm it, it is attached to the new account. Your place on the mailing list is separate consent and is not touched; see Mailing list.
Purchases
Payment is taken by Stripe, so we never see your card details. When you start a checkout we send Stripe what you are buying, which version of these terms you agreed to and when, and — if you are signed in — your email address and your account's identifier, so that the payment and the purchase match. For each product you buy we keep:
| Data | Why | Lawful basis |
|---|---|---|
| Your email address, and your account if you were signed in | Delivering what you bought, and attaching it to your account | Contract |
| What you bought, the amount and currency, Stripe's reference for the payment, and the date | Our record of the sale | Contract; legal obligation |
| Which version of these terms you agreed to at checkout, and when | A record that you agreed to them | Contract |
| Whether the payment was refunded or disputed, how much was refunded, and the dispute's reference | A full refund or a lost dispute ends access, as the terms say | Contract |
| If access is changed by hand: the new status, the reason we give you, when, and who made the change | Showing you why on your account page, and our own records | Contract |
Downloads go to the account the purchase is attached to. A purchase made while signed in is attached to that account straight away. One made without an account is attached once an account with the same address has been verified.
Download and license data
| Data | Why | Lawful basis |
|---|---|---|
| Which files you downloaded, and when, recorded against your account | Support, fraud prevention, license enforcement | Legitimate interests |
| A truncated IP address and your browser's user agent at download time | Abuse detection | Legitimate interests |
We keep download records for 24 months, then they are deleted automatically. Deleting your account deletes them at once, and you can ask us to remove them sooner — see section 6. They are a log, not your license: what you are entitled to comes from the record of your purchase.
Downloads are served only to the account that owns them, while you are signed in to it. Files come through a link that expires after 15 minutes.
Free demo requests
You can download a free demo without an account, by giving us an email address.
| Data | Why | Lawful basis |
|---|---|---|
| Email address and which demo you asked for | Linking the demo to your account if you register later, and support | Legitimate interests |
| Time of the request | Support, and telling one request from another | Legitimate interests |
| IP and email address, for a short period | Rate limiting the form against abuse — see Rate limiting below | Legitimate interests |
We do not verify this address, and we do not treat it as proof of identity. If you later register an account and verify the same address, the demo appears in that account.
Asking for a demo does not subscribe you to anything. The form has a separate, unchecked box for that, and the download works whether or not you check it.
A demo request is not attached to an account when you make it. We keep the record of it — your address, the product and the date — so that the demo can appear in an account you make later, until you ask us to delete it; see section 6. The download link we email you lasts 24 hours, and our record of it (the link, your address and the file) is then deleted automatically, usually within a day. Rate limiting is kept separately, and for much less time — see Rate limiting below.
Mailing list
Subscribing takes two steps: you give us your address, and we email you a link to confirm it. Nothing subscribes you until you click that link.
You can ask from the newsletter form, from the optional box on a free demo request, or from the optional box when you register. Each is a deliberate opt-in, never a side effect of doing something else, and we record which one it came from.
| Data | Why | Lawful basis |
|---|---|---|
| Your email address, and your name if you give one | Sending you the newsletter | Consent |
| The form you signed up from, and when you asked and when you confirmed | A record of your consent | Legitimate interests |
| A truncated IP address and your browser's user agent, from when you asked | Abuse triage, and a record of the request | Legitimate interests |
| Whether your address reached the mailing list, whether the welcome email went, and why not | Putting right a signup that did not go through | Legitimate interests |
For the confirmation itself we keep a random code, your address, and when it was made and used.
If you do not confirm, the request and the code are deleted automatically once the link expires, 7 days after we sent it — usually within a day after that.
If you confirm, you stay on the list until you unsubscribe. Every newsletter has an unsubscribe link at the foot, which takes effect immediately. The confirmation email and the welcome email are one-off messages and may not carry one; to leave from either, or at any time, email privacy at phasectrl dot com.
When you unsubscribe, Resend keeps your address marked as unsubscribed, so that no newsletter reaches it again. Our own record of your signup, described above, is not told about the unsubscribe and stays as it was: it shows that you consented, not that you still do. We delete it when you ask — see section 6. Deleting your account does not unsubscribe you; the mailing list is separate consent, given and withdrawn by address.
Delivery is handled by Resend (Plus Five Five, Inc.), who process the address on our behalf.
Contact form
If you write to us through the contact page, we store your message along with a little about where it came from.
| Data | Why | Lawful basis |
|---|---|---|
| Your name, email address, subject and message | Reading and answering your message | Legitimate interests |
| Time you sent it | Support, and telling one message from another | Legitimate interests |
| A truncated IP address and your browser's details | Abuse triage | Legitimate interests |
"Your browser's details" is the user agent your browser sends with every request, which names the browser and operating system.
A copy is emailed to us through Resend (Plus Five Five, Inc.), so we see it promptly, and our reply goes to the address you gave. Writing to us does not subscribe you to anything.
We keep messages so that we have the history if you write to us again. They are not deleted automatically. You can ask us to delete yours at any time — see section 6.
Rate limiting
To stop the forms on this site from being abused, we count how often each one is used. The contact form, the newsletter form, free demo requests, signing in with a password, creating an account, password resets, verification emails and, where we offer them, one-time sign-in links each keep a count per IP address. Demo requests, the account forms, the newsletter form and sign-in links also keep one per email address, so that no one can use them to guess a password or flood someone else's inbox.
Each count is stored under a hash of the IP or email address rather than the address itself, together with the number of requests and when counting began. A count stops being used when its window closes, after 10 minutes at most, and is then deleted automatically, usually within a day.
Basis: legitimate interests — keeping the forms working for the people using them.
Analytics
We use Google Analytics 4 on this site, and only after you accept the cookie banner. Decline, and no analytics script is loaded and no analytics cookie is set — on these pages, the request to Google is never made at all.
When enabled, GA4 collects pages viewed, approximate location, device and
browser type, and a randomly generated identifier stored in a _ga cookie for 2
years. The location is worked out from your IP address, which Google does not
store — that is how GA4 behaves by default rather than a setting we switched on.
Advertising signals are denied in every case, whether or not you accepted the banner, so nothing collected here is used to personalize ads or build an advertising profile.
Our listings on Gumroad are measured too, and the choice you make here does not reach them. While we sell through Gumroad, their product pages carry our Google Analytics measurement ID, so what you do there — viewing the listing, adding to the cart, and completing a purchase, along with its value — is reported into the same Analytics property as this site. Gumroad loads that tag on their own pages: our banner does not run there and cannot switch it off, so this happens whether you accepted or declined here. What applies instead is Gumroad's own privacy notice and cookie controls. If you did accept here, the two visits may also be recognized as one, which is how we can tell that a purchase followed from trying a demo on this site.
Basis: consent, for the analytics we run on these pages. The Gumroad measurement described above is Gumroad's own collection on their pages, under their notice rather than this one.
Cookies we set ourselves
| Cookie | Purpose | Lifetime |
|---|---|---|
__session |
Keeps you signed in. HttpOnly, so scripts cannot read it. | 5 days |
phasectrl_consent |
Remembers your cookie choice so we stop asking. | 1 year |
_ga, _ga_* |
Google Analytics, only after consent. | 2 years |
The first two are strictly necessary or set on your explicit instruction, and are not used for tracking.
Other storage on your device
Cookies are not the only thing a site can keep in your browser, so this is not covered by the table above.
| What | Where | Purpose | Lifetime |
|---|---|---|---|
phasectrl_cart |
localStorage |
Remembers what you put in your cart. | Until you clear it or check out |
phasectrl:theme |
localStorage |
Remembers whether you chose the light or the dark theme. Set only when you switch. | Until you clear it |
pc:federated |
localStorage |
Notes that this browser signed in with Google or Apple, so that sign-in can be cleared after you leave. | Until your next visit while signed out |
| Firebase Authentication's records | IndexedDB (firebaseLocalStorageDb) |
Kept by Firebase's own code when you sign in with Google or Apple. We do not use them: your session is the __session cookie. |
Until your next visit while signed out |
The last two exist only if you sign in with Google or Apple. Signing out clears
__session; the next page you open while signed out clears the Firebase records
and the note, so a shared computer does not keep a record of whose account was
used. The theme choice and the sign-in note hold nothing about you beyond what
they say.
Checking out on this site opens Stripe's checkout in a dialog, which loads Stripe's own script, Stripe.js, from Stripe. It is loaded only when you start a checkout. Stripe uses it to collect information about your device and how you use the checkout to detect fraud, and may keep its own data in your browser to do so; that is Stripe's, under Stripe's privacy and cookie policies, not this one.
Your cart is stored on your device. It holds only the identifiers of the products you added — no prices, and nothing about you. It is sent to us when you open the cart panel or start a checkout, because that is when we have to turn those identifiers into names and prices.
It is emptied when you empty it, and when a payment succeeds. Clearing your browser's site data removes it, the same as a cookie.
This is strictly necessary storage, set on your explicit instruction — you added something to a cart — so it does not depend on the cookie banner.
If you are signed in, we also keep a copy, so your cart follows you between devices. It holds the same product identifiers and nothing else, is tied to your account, and is never shared. When you sign in on a device, the cart on that device and the one on your account are combined — you keep everything from both, which does mean something you removed on one device can come back from another. Your cart page always lists exactly what you are about to pay for.
Basis: legitimate interests — keeping a shopping cart working across your devices. Signing out leaves the cart on that device and does not delete the copy on your account; emptying your cart does.
3. What we do not do
- We do not sell personal information, or share it for cross-context behavioral advertising. See section 6.
- We do not run advertising trackers, pixels, or social embeds.
- We do not collect the content you process with our software. The apps do not phone home with your material.
4. Where your data is processed
We are a US company and your data is stored and processed in the United States. Our infrastructure runs on Google Cloud Platform in us-central1 (Iowa, USA).
If you are in the EEA or the UK, that means your data is transferred outside your region, to a country whose surveillance and redress laws differ from your own. Those transfers rely on [Standard Contractual Clauses / the UK Addendum / the EU-US Data Privacy Framework] with the relevant provider.
Processors we use:
- Google (Firebase / Google Cloud) — hosting, authentication, database, file storage, analytics.
- Resend (Plus Five Five, Inc.) — transactional and marketing email.
- Stripe and Gumroad — payment processing, and merchant of record for purchases. That is more than a processor relationship: for the sale itself they are the seller, and they decide independently what they collect and keep in order to take payment, calculate tax and meet their own legal obligations. They are controllers in their own right for that data, and we never receive your card details. See their privacy notices for what they hold; this policy covers only what reaches us — for a purchase through Stripe, what is listed under Purchases in section 2. Gumroad also runs our Google Analytics measurement ID on their listing pages, outside the control of the banner on this site — see Analytics in section 2.
5. How long we keep things
| Data | Retention |
|---|---|
| Account data | Until you delete your account |
| Purchase records | Kept as our record of the sale; detached from your account if you delete it |
| Download records | 24 months, then deleted automatically, or at once when you delete your account |
| Demo requests | Until you ask us to delete them; the emailed link, 24 hours |
| Contact messages | Until you ask us to delete them |
| Rate-limiting counters | 10 minutes, then deleted automatically, usually within a day |
| Sign-in links | An hour, then deleted automatically, usually within a day |
| Unconfirmed signups | 7 days, then deleted automatically, usually within a day |
| Mailing list entry | Until you ask us to delete it; unsubscribing stops the emails at once |
| Saved cart | 30 days after you last change it, then deleted automatically |
| Server logs | 30 days |
| Analytics | 14 months (GA4 retention setting) |
Saved carts, rate-limiting counters, download records, emailed demo links, sign-in links, and unconfirmed signups with their confirmation links are all deleted by the database itself, not by a job that has to remember to run. It removes expired entries in the background, which is why deletion can trail expiry by up to about a day.
Server logs. Like any website, ours keeps logs of the requests it serves and of the errors it hits. A request log records the page asked for, when, the response, your browser's user agent and the network address the request came from. Logs are used only to keep the site working and to investigate abuse, and are deleted after 30 days.
6. Your rights
Which rights you have depends on where you live, but we apply the list below to everyone rather than asking you to prove residency first.
You may ask us to:
- tell you what personal information we hold about you, where it came from, and who we shared it with;
- give you a copy of it in a portable format;
- correct anything inaccurate;
- delete it;
- stop using it — withdraw consent, or opt out of analytics, at any time.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the California Consumer Privacy Act. We have never done so. There is therefore no "Do Not Sell or Share My Personal Information" process to complete — the answer is already no, for everyone.
We will not discriminate against you for exercising any of this: no price change, no degraded service, no withheld download.
To exercise a right, email privacy at phasectrl dot com from the address on your account, or use the account page to change your details or delete your account directly. We respond within 45 days, and will tell you if we need the extension that California law allows. There is no charge. If we cannot verify that the request is yours, we will say so rather than act on it.
If you are in California, you may also designate an authorized agent to act for you, and you may appeal a refusal by replying to our response. Residents of other states with comparable privacy laws have substantially the same rights and the same appeal route.
If you are in the EEA or the UK, you additionally have the right to restrict or object to processing, and to complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, your national data protection authority.
Complaints from the US can go to your state attorney general, to the California Privacy Protection Agency if you are a California resident, or to the Federal Trade Commission. We would rather you emailed us first.
7. Security
Passwords reach our server only over an encrypted connection, on their way to Firebase Authentication, which stores them hashed; we do not store or log them. Session cookies are HttpOnly, Secure and SameSite=Lax. Access to production data is limited to administrators: the people named in our access rules, and anyone we give administrator access to individually for a piece of work, each signed in with a verified address. Paid files are not publicly readable: they are served only to the account that owns them, through signed links that expire after 15 minutes.
No system is perfectly secure. If you believe you have found a vulnerability, please email security at phasectrl dot com before disclosing it publicly.
8. Children
The service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it. This is the threshold the US Children's Online Privacy Protection Act sets; in the EEA and the UK the equivalent age of consent for online services is 16, and we treat that as the threshold for visitors there.
9. Changes
We will post changes here and update the date above. Material changes will be emailed to account holders.