Privacy Policy

1. Information We Collect

Account Information

• Email address — used for authentication and account recovery
• Username — displayed publicly on shared chains, comments, and your profile
• Password — stored as a PBKDF2 hash; we never store or have access to your plaintext password

Profile Information (Optional)

• Contact information (phone number, Instagram handle) — used only for friend lookup
• Display name

Plugin Data

When you use the plugin scanner, we collect a list of installed audio plugins (names, manufacturers, formats) to enable plugin compatibility checking and cloud chain features. This data is synced to the cloud only if you are logged in and have completed the onboarding scan.

Chain Data

When you save chains to the cloud, we store chain name, description, structure (plugin order, group configuration), plugin preset data, and associated metadata.

Social Activity

• Star ratings, comments, follow/unfollow actions
• Friend requests and friendships
• Chain forks

Usage Data

We currently do not collect analytics, telemetry, or usage tracking data. This may change in future versions, and this policy will be updated accordingly.

2. How We Use Your Information

• Authenticate you and maintain your session
• Display your username on shared chains, comments, and profiles
• Enable plugin compatibility checking (matching your plugins against community chains)
• Deliver chains shared with you by friends
• Display ratings, comments, and social interactions on community chains
• Enable friend lookup by username, email, phone, or Instagram handle

We do not sell your data to third parties.

3. Data Storage

All user data is stored in a Convex cloud database (convex.dev). Convex provides encrypted data at rest and in transit, hosted in the United States, with automatic backups. For more information, see convex.dev.

4. Session Management

• Session tokens are stored in your browser's localStorage and expire after 7 days
• Tokens are opaque (not JWTs) and cannot be decoded by third parties
• You can log out at any time, which invalidates your session token

5. Third-Party Services

We do not currently use any third-party analytics, advertising, or tracking services.

6. Data Sharing

• Public chains: visible to all ProChain users including name, description, structure, your username, and associated ratings/comments
• Friend interactions: friends can see your username and chains you send to them
• Comments and ratings: visible to all users on the associated chain's page
• Legal requirements: we may disclose data if required by law

7. Data Retention and Deletion

Your data is retained as long as your account is active. You can request deletion by contacting us (see Section 10). Upon deletion we will remove your profile, saved chains, comments, ratings, friend connections, and synced plugin data. Backups may be retained for up to 30 days.

8. Children's Privacy

ProChain is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of ProChain after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, data deletion requests, or concerns: privacy@pluginradar.com