Privacy
What we keep, and who sees it
Browsing without an account
The landing page, the catalogue and the pricing page need no account. We remember, in your browser only, which campaign link brought you here (the utm_ parameters and the referring site), so that if you later sign in we know where you came from.
Signing in
Opening a figure's timeline needs an account: your e-mail address, or your Google account. Sign-in is handled by Supabase, our identity provider, which stores your address and the session. If you sign in with Google, Google tells Supabase your address, name and profile picture, and knows that you signed in here; we use only the address. We keep your address, when you first and last signed in, the campaign that brought you, and whether you opted in to marketing e-mail. There is no password.
What we record while you use it
For signed-in users our server records which timelines and recordings it sent you, and for each search how many results it found and how long the search was (never what you searched for). These records are kept in our database and exist to tell us whether the product is worth building further. They never contain anything you typed. What happens only in your browser — playing a recording, following a link to another site, the price being on screen — is never sent to our server.
Usage analytics
While you are signed in, we also send those same steps, and the fact that you signed up or asked for access, to Amplitude, our analytics provider, under your account's id. Never your e-mail address and never anything you typed. We do this because learning how the product is used is how we decide what to build, which we consider a legitimate interest. It does not depend on the cookie banner, which decides only whether these reports also carry your browser's analytics id (below). You can object at any time by turning off Usage analytics on your account page; from then on our server sends nothing about your use, and our own records are unaffected.
Requesting access
Asking for access to an edition records the offer and the price you saw, and that you agreed to be contacted about that edition. No payment details are collected and nothing is charged. We will e-mail you about that edition and about nothing else, unless you also turned marketing e-mail on.
Suggesting a figure
When you suggest someone for the catalogue, we keep the name you wrote, the shelf you suggested them from (or, from a search that found no one, what was in the search box), and when. You need no account and we keep no address of yours: to stop one connection sending a flood of suggestions, we store a one-way, keyed fingerprint of your network address with it, which cannot be turned back into the address. If you accepted analytics cookies and are not signed in, we also tell Amplitude that a figure was suggested, under your browser's analytics id, and from which shelf or that it came from a search — never the name or the search.
Analytics cookies
With your consent, given through the cookie banner, your browser itself sends product events — which pages you visit, whether you played a recording or followed a link to another site (the site, not the address), and when the price was on screen — to Amplitude, under a random analytics id kept in a cookie, never your e-mail address. Once you sign in it sends your account's id as well, which joins what you did before signing in to your account. With the same consent your browser shows that analytics id to our server, so what our server sends joins the same history. If you decline, nothing about you goes to Amplitude before you sign in. Declining changes nothing about what you can use, and does not turn off usage analytics while you are signed in, which has its own switch. Your choice is kept in your browser (and, once you sign in, recorded on your account); change it at any time under “Cookie settings” in the footer.
Players from other sites
Recordings are never hosted here. When you press play, your browser loads a player from YouTube (through its privacy-enhanced domain) or the Internet Archive, and that site sees your request as it would if you visited it directly. Nothing loads until you press play.
Your rights
Write to hello@saidinfull.com to see what we hold about you or to have it deleted. We answer within a few days.