Privacy Policy — Gig Grid

Gig Grid ("we") provides a planning tool for arranging desktop synthesizers in gig cases. This page explains what data we collect when you use giggrid.net, how it's used, and the choices you have.

What we collect

Account details: the email address and username you provide at signup, plus your hashed password (handled by Supabase Auth — we never see the plaintext).
Your rigs: the layouts, gear placements, custom designs, and case settings you create. These are stored under your account so you can return to them.
Usage analytics:via PostHog (hosted in the EU) we record which pages you visit and which features you use, so we can improve the product. Anonymous visitors get a notice banner on first visit. We respect the browser's Do Not Track setting.
Session recordings (beta participants only): while Gig Grid is in Open Beta, signed-up users have agreed via a mandatory checkbox to PostHog session replay. Form inputs are masked, account/admin/password-reset pages are excluded entirely, and consent is withdrawn via account deletion. The terms are spelt out in our Open Beta Policy. Anonymous visitors are not session-recorded.
IP address: recorded transiently when you submit feedback or view a public rig, used for spam/abuse protection and rate limiting. View-recording IPs are purged after 30 days; feedback IPs after 90 days.
Error reports: uncaught errors are sent to PostHog so we can fix bugs.

Where your data lives

Supabase — our database, authentication, and file storage provider.
PostHog (EU) — product analytics and session recordings.
Resend — sends signup confirmation and password reset emails.
Vercel — hosts the website itself.
Cloudflare Turnstile — runs the bot-protection challenge on signup, sign-in, and password-reset forms.

Public content

Any rig you mark as public becomes visible to anyone with its share link — name, gear placements, dimensions, and your username are shown. View, like, and remix counts are aggregated and shown alongside.

Your choices

Opt out of analyticsvia the consent banner on first visit, or by setting your browser's Do Not Track flag.
Delete your account from the Account page. Your profile, saved gear, and likes are removed. Public rigs you've published survive in anonymised form so they remain available for other users who have remixed them; your username is replaced with a sentinel placeholder.
Make a rig private at any time from its editor. Past view counts on a rig that was previously public are kept.

Contact

Questions, requests, or complaints about data handling go to privacy@giggrid.net.