Privacy policy

Who this covers

This policy covers supershoot.app, the One-Day Shoot Script Kit and the Supershoot app. The site, the kit and the app are run by Cosmic Arc Media LLC in San Angelo, Texas. "I" in this policy means Landon Ward and Cosmic Arc Media LLC.

The short version: I collect very little, I don't sell it, and this site has no analytics, ad pixels or cookies.

What I collect, and why

The waitlist

When you join the waitlist, the site stores your email address, which page you signed up on, whether you said you bought the kit, the time you signed up, your browser's user agent (the text that names your browser and device type) and your country, which Cloudflare works out from your connection. A hidden form field catches bots.

I use it to email you about the app, to match kit buyers to their free month, and to keep duplicates and spam out of the list. It lives in a Cloudflare D1 database.

Buying the kit

The kit is sold through a Stripe payment link. Stripe's checkout page collects your name, your email and your payment details. Stripe handles the payment. Your card details go to Stripe, and I don't store them. I keep the order record in my Stripe account, which shows who bought, what, when and how much.

Stripe's own privacy policy applies on its checkout page, and Stripe may set its own cookies there.

The download email

After you pay, Stripe sends a notice of the order to Make, an automation service. Make triggers an email through Gmail, sent from my account to the email you gave at checkout, with your download links. Make keeps a list of order IDs so nobody gets the email twice. The files themselves sit in Google Drive, and Google may log who opens a link under its own policy.

Support email

If you write to the support address, I keep the conversation in my email so I can help you and pick the thread back up later.

Hosting and security logs

Cloudflare hosts this site. To serve pages and block attacks, Cloudflare processes technical details of each visit, such as your IP address, the page you asked for and your browser type. I don't use those logs to track you.

What the site doesn't do

There are no analytics, no ad pixels and no cookies on this site. The fonts are served from the site itself, so your browser doesn't call Google Fonts or any other outside server to draw a page. The kit page links out to Stripe when you choose to buy, and from that moment you're on Stripe's site.

Who handles your information

I use a short list of services to run this: Cloudflare (hosting and the waitlist database), Stripe (payments), Make (the automation), Google (Gmail and Drive) and Apple (the App Store, once the app is out). Each one handles your information to do its job for me, under its own terms. I don't sell or rent your information, and I don't share it for advertising.

I run this from the United States, and the services above may process data in the US and other countries.

The Supershoot app

The app isn't released yet. This section describes how it's built today, and I'll update it at launch.

• Video, audio and speech recognition are processed on your device. Your scripts, takes, captions and finished reels live on your phone.
• The app has no accounts and no cloud sync. Nothing gets posted to social apps for you.
• iOS asks for access to the camera, the microphone and your Photos library. Photos access is used to save your reels and takes. If you export takes to Files or share a file, that copy goes where you send it.
• Speech recognition comes from Apple. The speech tool the app uses to time your words runs on the phone, after a one-time download of Apple's speech model from Apple. If any step of the app ever sends audio off your device, I'll say so on this page before it ships.
• If the app is sold as a subscription, Apple handles the purchase and billing through the App Store. I don't get your card details.

The App Store listing will carry Apple's privacy summary for the app as well.

How long I keep it

• Waitlist entries stay until you ask me to remove them, or until I've finished the launch emails and cleared the list.
• Order records stay in Stripe as long as I need them for taxes and bookkeeping.
• The order ID list in Make and the delivery emails stay as long as I need them to avoid double sends and to help you if something goes wrong.
• Support emails stay until I no longer need the thread.
• Cloudflare, Stripe, Make, Google and Apple keep logs on their own schedules.

Your choices and deletion requests

Email support@supershoot.app from the address you used and tell me what you want: a copy of what I have, a correction, or deletion. I'll delete your waitlist entry and my emails with you. Order records can stay where the law or my bookkeeping needs them. Copies held by Stripe, Google and the other services follow their own policies.

Every launch email will carry an unsubscribe option. You can also reply to any email and ask me to stop. This works the same wherever you live.

Children

Nothing here is directed at children under 13, and I don't knowingly collect information from them. If a child signed up, email me and I'll delete it.

Security

I rely on established providers for storage, payment and email, and I keep access to them limited. No system is perfectly safe, and I can't promise that nothing will ever go wrong.

Changes to this policy

When I change this policy, I'll update the date at the top. If the change is a big one, I'll email the people on the waitlist.

Contact

Cosmic Arc Media LLC
San Angelo, Texas, United States
support@supershoot.app