Your information, handled clearly.

1. Scope

This policy applies to the public .hson Systems website, contact form, website accounts, authenticated applications and downloads, membership billing records, and related access controls. A separately purchased or custom-built product may include additional privacy terms.

2. Information we collect

Information you provide

When you submit the contact form, we collect your full name, email address, optional company name, message, and submission time.

When you create an account, Firebase Authentication stores the username, email address, password credential, account identifier, email-verification state, account-creation time, last-sign-in time, and account status. Password credentials are handled by Firebase Authentication and are not readable or displayed by .hson Systems.

The Founder Control account view may display the username, account email, assigned tier, verification and account status, subscription status, creation time, last-sign-in time, download and login counts, and a shortened internal identifier. It does not display passwords, authentication tokens, complete card details, message content, or IP addresses.

When you begin a membership, Stripe processes your name, email, billing address, payment method, tax location information, invoices, and subscription activity. .hson stores Stripe customer and subscription identifiers, the selected tier, subscription status, renewal or cancellation timing, and a record of the recurring-payment consent. .hson does not receive or store complete card numbers or card security codes.

If you link Twitch, .hson stores only your Twitch username and display name, Twitch user ID, connection status, subscription status and tier when returned, last verification time, and resulting member entitlement. Twitch authorization tokens are encrypted and kept in a separate server-only credential record. We do not request Twitch email access and do not collect your Twitch password, email, real name, phone number, address, billing details, or payment history.

Information collected automatically

• Our hosting, authentication, payment, and cloud providers may process IP addresses, request headers, timestamps, device or browser details, and basic request information to deliver and protect the services.
• Rate-limit counters and security records may be created to prevent repeated authorization attempts, automated submissions, and excessive protected-content delivery.
• Membership consent records include the plan, displayed amount, terms version, timestamp, a one-way hash derived from the request address, and a limited browser identifier for dispute prevention and legal recordkeeping.
• If you allow optional analytics, Google Analytics may collect device, browser, approximate location, interaction, and usage information.
• The website stores your privacy choice locally, and protected desktop products may retain sign-in state on your device until you sign out or clear application data.

We do not ask you to enter payment-card details into .hson website forms. Payment details are entered only on Stripe’s or Twitch’s secure hosted pages.

3. How we use information

• To create, verify, and maintain accounts and membership access.
• To process subscriptions, provide invoices and billing controls, prevent duplicate subscriptions, and apply paid tiers after verified payment or Twitch subscription status.
• To link one Twitch account to one .hson account, verify Ayrsnap subscription status, and restore or revoke member access as that status changes.
• To respond to questions, project inquiries, billing issues, and support requests.
• To verify registered access before delivering protected products.
• To deliver, maintain, secure, rate-limit, and troubleshoot the website and related services.
• To understand website usage and improve the experience when you consent to analytics.
• To prevent fraud or abuse, maintain financial records, resolve disputes, and meet applicable legal obligations.

4. Service providers and disclosures

Google Firebase provides hosting, email-and-password authentication, cloud functions, databases, and protected file delivery. Stripe provides hosted checkout, payment processing, tax calculation where configured, invoices, subscription management, fraud controls, and the customer billing portal. Twitch provides OAuth account linking, subscription verification, and Twitch-hosted subscription payment processing. FormSubmit delivers contact messages after server-side validation and rate limits. Google Analytics operates only when you choose optional analytics. These providers process information under their own terms and privacy practices.

We may disclose information when reasonably necessary to comply with law, protect rights or security, investigate abuse, process payments, or complete a business transfer. We do not sell personal information or share it for cross-context behavioral advertising.

5. Analytics and local storage

Essential local storage supports saved demo settings and remembers your privacy choice. Optional analytics remains off until you select “Allow analytics.” You can change that choice at any time using “Privacy choices” in the website footer.

6. Retention

We retain account and access records while an account is active and for a limited period afterward for security and recordkeeping. Billing, consent, invoice, tax, refund, and transaction records may be kept longer when reasonably necessary for accounting, disputes, fraud prevention, or legal obligations. Twitch link data and encrypted Twitch credentials are deleted when you use Disconnect Twitch Account; the resulting member access is revoked immediately. Inquiries are retained only as long as reasonably necessary to respond and maintain appropriate business records. Rate-limit records are short-lived operational records. Local settings and sign-in persistence remain on your device until you sign out, uninstall, or clear stored data.

7. Your choices

You may request access to, correction of, or deletion of personal information associated with your account or inquiry by emailing hsonsystems@gmail.com. An active subscription must be canceled before the related account can be deleted so recurring charges are not orphaned. We may need to verify your request and may retain limited billing, security, tax, or transaction information when required by law or reasonably necessary for legitimate recordkeeping.

8. Security

We use layered safeguards appropriate to the information handled, including verified email-and-password accounts, Stripe- and Twitch-hosted payment entry, signed payment webhooks, server-side entitlement checks, one-time OAuth state validation, encrypted server-only Twitch credentials, deny-by-default database rules, request validation, delivery limits, restricted cloud capacity, and no-store controls for protected content. No internet transmission or storage system can be guaranteed completely secure, so do not send confidential or highly sensitive information through public forms.

9. Children

This website is intended for business and creator audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. International visitors

The website and its providers may process information in the United States and other countries where service providers operate. Those locations may have different data-protection rules than your country.

11. Changes and contact

We may update this policy as the website or its services change. The effective date above identifies the latest version. Questions or privacy requests can be sent to hsonsystems@gmail.com.