PRIVACY
Privacy Policy
Effective 1 September 2026
The short version: if you join the waitlist we keep your email address so we can tell you when Stranto launches, and we delete it the moment you ask. There are no analytics on this site, no advertising trackers, and nothing is sold to anybody. The rest of this page is the detail behind that.
This policy covers the Stranto website and the early-access waitlist — nothing more. Stranto the product is not yet available, so there are no accounts, no uploads, and nothing to bill. When the service launches it will come with its own privacy policy covering the material you put into it, and you will be asked to read that separately.
Who we are
Stranto is a shared performance workspace being built for musicians and the people who work alongside them. We decide why and how the information described here is used, which makes us the data controller for it. The contact section at the foot of this page is the way to reach us about any of it.
What we collect
- What you type. Your email address, when you join the waitlist. And if you open the “what do your current tools get wrong?” panel on the bar at the foot of the screen, whatever you write there, up to 1,000 characters. Both are things you choose to give us.
- Which button you used. We record where a signup came from — the hero, the pricing section, one of the pages written for your kind of group — so we can tell which parts of the site are doing their job. It says nothing about you personally.
- Your IP address, briefly. Every request to every website carries one. We hold yours in memory for sixty seconds so that a single machine cannot hammer the form, and we pass it to Cloudflare’s bot check when you submit. It is never written into our database and never attached to your signup.
- Ordinary server records. Vercel, which hosts this site, keeps the standard request logs that every web server keeps.
What we don’t do
This site runs no analytics, no advertising trackers, and no pixels. We do not profile you, we do not follow you to other sites, and we never sell your information or hand it to anyone for their own marketing. Two details are worth stating plainly:
- No tracking cookies. The site sets none of its own. Cloudflare’s bot check may set one strictly in order to run the check. Separately, your browser remembers that you dismissed the bar at the foot of the screen — that note lives only in your own browser, for the length of the tab, and never reaches us.
- The typefaces come from us. Our fonts are served from this site’s own domain rather than fetched as the page loads, so your browser never announces your visit to Google.
How we use the data we collect
- To tell you at launch. That is what the waitlist is for, and it is why you gave us the address. In legal terms we rely on your consent, which you can withdraw at any time.
- To understand what performers need. We read what people tell us about their current tools and let it shape what we build. Here we rely on our legitimate interest in building something worth using.
- To keep the form from being abused. The rate limit and the bot check exist so the waitlist is not filled with machine entries or turned into a way to flood someone’s inbox. Legitimate interest again.
We do not make automated decisions about you, and we do not build a profile of you.
How we process your information
We use a small number of companies to run the site. Each acts on our instructions and may not use your information for its own purposes:
- Supabase — the database that holds waitlist records.
- Resend — sends the email that reaches you, and the summary of new signups that reaches us.
- Vercel — hosts the site and keeps its server logs.
- Cloudflare — runs the bot check on the waitlist form.
- Reality Alpha — the studio that built Stranto and maintains it, including its security updates. Its engineers can reach the systems where waitlist records are held in the course of that work.
These providers are based in the United States, so if you write to us from elsewhere, your information is handled there under the safeguards their agreements with us require.
How long we keep your information
We keep waitlist signups until launch and the reasonable period afterwards needed to get you set up, and then we delete them. If you ask to be removed before that, we delete your record — we do not merely mark it inactive.
The IP addresses behind the rate limit are held in memory for sixty seconds and are never stored. Server logs are kept by Vercel on its own schedule.
Your rights
Wherever you live, you can ask us to tell you what we hold about you, to correct it, to delete it, or to send you a copy you can take elsewhere. You can object to how we are using it, and you can withdraw your consent to the launch email at any time — which, for the waitlist, amounts to the same thing as asking to be deleted.
Ask through the contact section below and we will act on it. We will not charge you, and we will not treat you any differently for having asked. If you believe we have handled your information badly, you are entitled to complain to your data protection authority in the UK or the EU, or to your state attorney general in the United States — though we would rather you gave us the chance to put it right first.
We do not collect information from children
Stranto is built for working performers, and this site is not directed at children. We do not knowingly collect information from anyone under 13, and we ask that you do not join the waitlist if you are under 13.
If you are a parent or guardian and believe your child has given us their information, tell us through the contact section below. We will delete the record and confirm to you that it is gone. You do not need to prove anything to us first, and we will not ask you for further details about your child in order to do it.
How we look after your information
The site is served over an encrypted connection, its pages run under a content security policy, the keys that reach the database stay on the server and never touch your browser, and the waitlist form sits behind a rate limit and a bot check. No site can promise perfect security, but we would rather tell you what we actually do than claim otherwise.
Changes to this policy
We may update this policy as the site changes. The effective date at the top always shows the current version. If a change is material, we will let waitlist subscribers know by email at the address on file.
Contact
To ask what we hold, to have it deleted, or to raise anything else about this policy, please get in touch. We aim to respond within five business days. Our Terms of Service cover the rest of your use of this site.
This policy took effect on 1 September 2026. We review it as the site changes.