Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address)
• Profile information you choose to add
• Content you post (questions, replies, comments)
• Communications with us

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Send you notifications related to your account
• Respond to your comments and questions
• Monitor and analyze usage patterns

3. Information Sharing

We do not sell your personal information. We may share information with service providers who assist in operating our platform, or when required by law.

4. Data Security

We implement appropriate security measures to protect your personal information. However, no method of transmission over the internet is 100% secure.

5. Cookies and Tracking

We use only technically necessary cookies and privacy-friendly analytics:

• Authentication Cookies: We use session cookies (NextAuth.js) to keep you logged in. These are technically necessary for the platform to function and do not require consent under GDPR Article 6(1)(b).
• Local Storage: We use browser SessionStorage to temporarily save form drafts (e.g., when writing questions). This data never leaves your device and is not tracked.
• Analytics: We use Umami Analytics, a privacy-friendly, cookieless analytics service that collects only anonymous usage statistics (page views, referrers, browser types) without storing any personal data or creating user profiles. No consent required under GDPR.

We explicitly do not use tracking cookies, third-party advertising cookies, or any form of cross-site tracking. Vercel Analytics is disabled on our platform.

6. Your Rights

You have the right to:

• Access and receive a copy of your data
• Correct inaccurate personal information
• Request deletion of your account and data
• Object to processing of your data

7. Third-Party Services

We use the following third-party services:

• Email Authentication: Resend (email delivery service) for passwordless login
• Database: Supabase (PostgreSQL database hosting)
• File Storage: Vercel Blob (for uploaded images and media)
• Hosting: Vercel (website hosting and deployment)
• Analytics: Umami Cloud (privacy-friendly, cookieless analytics)

These services have their own privacy policies and are GDPR-compliant. We do not share your personal data beyond what is necessary for these services to function.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.

9. Data Controller

The data controller responsible for your personal data is:

The Dramaturgy
Email: hello@thedramaturgy.com

10. Contact Us

If you have questions about this privacy policy or want to exercise your rights under GDPR, please contact us at hello@thedramaturgy.com or through our contact form.