PLAYGRIDPrivacy Policy
Last updated 20 September 2026
RHYTM FUSION LLC, doing business as PlayGrid, [postal address — set in Admin → Site copy], is the controller of the personal data described here. This policy is written to match what the software actually does; if something is unclear, write to [email protected].
What we collect and why
| Data | When | Why |
|---|---|---|
| E-mail address, name (optional), password (stored as a scrypt hash) | Creating an account | To sign you in, send licence keys and account mail |
| Google account id and e-mail | Signing in with Google | To link that sign-in to your account. We receive no password and no access to your Google data. |
| Stripe customer id, subscription id, plan, period dates | Subscribing | To issue and renew your licence. Card details go to Stripe directly and never reach us. |
| A hardware fingerprint of each Mac, its name, the App version, and which features it has used | Activating and using the App | To enforce the per-plan device limit, show your Macs in the account, and know which features matter |
| IP address and browser user-agent | Every request | Sign-in sessions, rate-limiting against password guessing, and a security log |
| What you write to support | Using the support form | To answer you |
We do not run advertising or analytics trackers, and we do not sell or share personal data for advertising.
Cookies
The site sets three cookies, all essential: pg_session (keeps you
signed in, 30 days), pg_csrf (protects forms from cross-site posts)
and, if you arrived with a partner code, pg_promo (remembers the
discount, 30 days). Cloudflare, which fronts the site, may set its own technical
cookies. There are no tracking cookies, so there is no cookie banner.
Who else sees it
- Stripe — payments and subscription billing (Stripe, Inc., USA).
- Cloudflare — network, DNS and the download storage for the App (Cloudflare, Inc., USA).
- Google — outgoing e-mail is sent through Google Workspace, and "Sign in with Google" if you use it (Google LLC, USA).
Each acts as our processor under its own terms, or as an independent controller for its own services (for example Google for your Google account). We disclose data otherwise only if the law requires it.
How long we keep it
- Account, licences and device records: while the account exists. Deleting the account from Settings removes them immediately.
- Sign-in sessions: 30 days, or until you sign out.
- Security and audit log (sign-in failures with IP, licence changes, payments): up to 24 months, then deleted.
- Support e-mail: as long as needed to answer, then archived in the mailbox.
- Invoices and payment records at Stripe: as long as tax law requires, typically 7 years.
Your rights
You can see and download everything we hold about you at Account → Settings → Download my data, correct your name and e-mail there, and delete the account outright. Residents of California (CCPA), the EU/UK (GDPR) and other places with similar laws have the rights to access, correct, delete and port their data and to object to certain processing; the buttons above are how we honour them. For anything they do not cover, e-mail us. You may also complain to your local data-protection authority.
Children
PlayGrid is a professional tool and not directed at children under 16. We do not knowingly collect their data.
Security
Passwords are hashed with scrypt, session and reset tokens are stored only as hashes, licence keys are cryptographically signed, and the site is reached only over HTTPS. No system is perfect; if we learn of a breach affecting you, we will tell you.
Changes
We may update this policy; material changes are announced by e-mail. The current version is always at this address.
Contact: [email protected] · RHYTM FUSION LLC, [postal address — set in Admin → Site copy].