Privacy Policy

67 Studio (“67”, “we”), Israel, is the data controller for the streaming service at 67.studio (the “Service”). This policy explains what personal information we collect, why, and the choices you have. Contact: contact@67.studio.

• Account information — your email address and display name, received from our authentication provider (Clerk) when you sign up or sign in.
• Listening activity — which chapters and channels you play and the playback events around them (play, pause, seek, position, completion, timestamps, a per-session identifier, and whether playback was on-demand or radio). This powers resume, your library, and our content analytics.
• Credits and purchase records — credit grants and spends, bundle purchases, and the novels you unlock (with dates). Payment card details are handled entirely by our payment provider — they never reach our systems.
• Your submissions — star ratings (shown publicly only in aggregate) and written feedback (private to the 67 team).
• Technical information — IP address, device and browser type, and your language preference, from standard server logs and error reports.
• Communication preferences — whether you opted in to new-novel update emails, with the date and where you opted in. This is separate from your account and off by default.

To operate the Service: authenticate you, stream what you unlocked, remember your balance and library, and resume playback. To improve the catalog: aggregate listening analytics (completion and drop-off per chapter, per language) guide what we translate and produce next. To process purchases and grants, respond to your feedback, secure the Service (including abuse prevention and rate limiting), and meet legal obligations.

We send service emailsyou can't opt out of while you have an account (for example, purchase confirmations or important changes). We send new-novel update emails only if you opt in; you can withdraw that consent at any time from your wallet or via the unsubscribe link in any such email.

We do not sell your personal data. We run no third-party advertising and no cross-site tracking; our listening analytics are internal to the Service.

Where the GDPR (or UK GDPR) applies, we process your data to perform our contract with you (providing the Service), for our legitimate interests in operating, securing, and improving the Service, with your consent where required, and to comply with legal obligations.

We share personal data only with service providers processing it on our behalf, each bound by data-protection obligations:

• Clerk — authentication and account management;
• Lemon Squeezy — payment processing as Merchant of Record (when payments are enabled);
• Cloudflare R2 — media storage and streaming delivery;
• Vercel and Railway — application hosting;
• Sentry — error monitoring.

We may also disclose data where the law requires it or to protect the Service and its users.

We use essential cookies for sign-in and your session, and to remember your interface language. Your browser's local storage holds on-device preferences (such as your library filters) and buffers listening events before they are sent. We set no advertising or third-party tracking cookies.

We keep your data while your account is active. Purchase and credit records are retained as long as needed for accounting and tax obligations. Listening events are kept for analytics and may be aggregated or pruned over time. During pre-release periods (alpha or beta), test data — including accounts, balances, and history — may be deleted or reset (see the Terms). On account closure or request we delete or anonymize your data, subject to legal obligations.

Data is encrypted in transit (TLS); media is served through short-lived signed URLs; access to production systems is restricted and key-protected. No system is perfectly secure, but we design for least access.

You may request access to, correction of, export of, or deletion of your data, object to or restrict certain processing, and withdraw consent. Contact us at the address above; we will respond within the time the law requires. If you are in the EEA or UK you may also complain to your supervisory authority.

You can delete your account yourself at any time: open the user menu (your avatar in the header) → Manage account → Security → Delete account. Deletion takes effect immediately — your account, unlocked rights, shelf, ratings and comments are erased; payment records and anonymized listening statistics are retained as required for bookkeeping and service operation. You may also request deletion by email at the address above.

The Service is not directed to children under the age of digital consent in their country, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

Our providers may process data in countries other than your own, including the United States and the EU. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

We may update this policy at any time as the Service evolves, without individual notice — the version posted on this page, with the “last updated” date above, is the one in force; please check back from time to time. Where the law requires notice or renewed consent for a material change, that law prevails.

67 Studio · contact@67.studio