Privacy Policy

The Short Version

Umbra exists to give underground artists a home online, not to harvest your data. We collect only what is strictly necessary to provide the service. We do not sell, rent, or share your personal information with third parties for advertising purposes. Period.

What We Collect

• Account information — When you sign in with Google, we receive your name, email address, and profile picture. This is used solely to create and manage your Umbra account.
• Profile content — Anything you add to your profile (links, bio, images, music embeds, gigs, sets) is stored to display your public page. You control what is visible.
• Basic analytics — We may collect anonymous page view counts so you can see how your profile performs. No tracking pixels, no fingerprinting, no cross-site tracking.

What We Do Not Collect

• We do not track your browsing activity outside of Umbra.
• We do not use third-party advertising trackers or cookies.
• We do not sell or share your data with advertisers.
• We do not store your Google password. Authentication is handled entirely by Google.

How We Store Your Data

Your data is stored securely on infrastructure provided by Supabase and Vercel, both of which maintain industry-standard security practices including encryption at rest and in transit. Access to your data is restricted to authenticated requests from your own account via row-level security policies.

Your Rights

• Access and export — You can view all data associated with your account at any time through your dashboard.
• Deletion — You can delete your account and all associated data at any time. When you delete your account, everything goes with it. We do not retain your data after deletion.
• Correction — You can update or correct any information on your profile through the dashboard.

Third-Party Services

Umbra integrates with Google for authentication. When you sign in, Google's own privacy policy applies to the data they handle during the sign-in process. We receive only the information listed above. Media embeds (Spotify, YouTube, Bandcamp, etc.) are loaded from their respective platforms and are subject to those platforms' privacy policies.

Changes to This Policy

If we make meaningful changes to this policy, we will notify users through the dashboard. We will not quietly reduce your privacy protections.

Contact

Questions or concerns? Reach out at privacy@umbra.id