Privacy Policy
Last updated: 22 July 2026
PitchDance is made by one person, and this policy is meant to be read, not skimmed past. We collect as little as we can and we do not sell your data. Here is the whole picture.
What we collect
- Account data. When you create an account we store your name, email address, and a hashed version of your password. We never store your password in plain text.
- Purchase records. When you buy PitchDance, Paddle sends us a webhook with your name, email, and a transaction id so we can create your license. Card and billing details stay with Paddle. We do not see or store them.
- Waitlist signups. Before launch you can leave your email address to hear when PitchDance ships. We store the address and when you joined, nothing else. It is used for the launch announcement and at most a couple of updates before that. Email support@pitchdance.com any time and we will remove it.
- Server logs. Our hosting keeps short-lived technical logs such as IP address and request time. These help us keep the site secure and running.
- First-party site analytics. On public pages we count page views, trial-download clicks, checkout opens and completed checkouts. We also keep the referring domain, any UTM campaign tags, and a coarse mobile, tablet or desktop viewport class. This starts only after you allow optional analytics. We do not put account pages, form contents or arbitrary clicks in analytics.
- PostHog product analytics. PostHog helps us understand whether the trial, checkout, account recovery and license-delivery journeys work. It may receive public-page URLs, referring and campaign information, browser and device details, named product actions, an anonymous visitor identifier, and limited purchase-fulfilment status. After you allow optional analytics, a signed-in session can be identified with an opaque internal account id and broad license state such as active or none. We do not use your email address, name, license key, or Paddle transaction id as the analytics identity.
- Session recordings. If you allow optional analytics, PostHog may record how public pages were displayed and used so we can reproduce usability problems. Form inputs are masked. Recording and automatic element capture are disabled on all account and administration pages, and those areas are explicitly marked as private.
Why we collect it
To create and protect your account, to deliver and manage your license, to send the handful of emails a purchase requires, to understand whether the public site and purchase journey work, and to keep the service secure. Account, purchase, and delivery processing is needed to provide the product you request. Optional site analytics and session recordings are used only with your consent. That is all.
Where it is stored
The site and its database run on Cloudflare infrastructure, which may process data in the EU and the US. We rely on Cloudflare's own safeguards for moving data between regions. PostHog analytics is sent to PostHog's EU-hosted service.
No sale or advertising
We do not sell, rent, or trade your personal data. There are no advertising pixels and we do not use analytics to target advertising across other websites. The essential account session cookie is used to keep you signed in. If you allow optional analytics, PostHog keeps its analytics identifier in this site's local storage rather than in a third-party advertising cookie.
How site analytics works
Neither our first-party site analytics nor PostHog browser analytics starts until you choose Allow analytics. You can refuse without losing any site, account, trial, purchase, download, or support feature. You can change your choice at any time through Analytics settings in the site footer. Turning it off stops new browser analytics, clears the current first-party analytics session, and resets and opts the browser out of PostHog capture. Information collected before withdrawal is kept only for the retention periods below, unless you ask us to delete it sooner.
PitchDance keeps its small first-party analytics system alongside the website on Cloudflare. It stores only bounded public-page and product-journey events and does not store IP addresses, raw user-agent strings, account identities, email addresses, license keys, form values, session recordings, or page contents. It does not run on account or administration pages.
A random identifier is kept in your browser's session storage only for the life of the current tab after consent. It lets us count a visit without recognizing you on a later visit or in another tab. This first-party system uses no cookies or persistent visitor identifier. Optional analytics stays off when your browser sends Do Not Track or Global Privacy Control. Raw first-party analytics events are automatically deleted after 90 days.
PostHog provides the broader product analytics and public-page session recordings described above. After consent, its identifier can persist between visits so a trial-to-purchase journey can be measured. We do not intentionally send PostHog form values, passwords, email addresses, names, license keys, or payment details. Account and admin pages keep replay and automatic capture disabled; only explicit account journey events are sent after consent. PostHog is EU-hosted; see PostHog's privacy policy.
We send email through Resend. Almost all of it is transactional: your license key, account setup, email verification, and password resets. The one exception is the pre-launch waitlist described above; if you joined it, you will get the launch announcement and possibly one email before that, and you can be removed on request.
Payments and Paddle
Paddle is our merchant of record. It processes your payment and handles tax and invoicing, and it acts as an independent controller of the data you give it at checkout. See Paddle's privacy policy for how it handles that information.
Retention
We keep account and purchase records for as long as your account exists, so you can re-download the app and get support. Server logs are kept only briefly. If you ask us to delete your account, we remove your personal data, keeping only what we are legally required to retain for tax or accounting. First-party analytics events are retained for no more than 90 days. PostHog analytics events and public-page recordings are kept only while they are needed to understand and improve use of the public site. We review this data at least annually and delete or anonymise anything that is no longer needed. You may ask us to delete analytics associated with your account sooner.
Your rights
You can ask to see, correct, or delete the personal data we hold about you. Email support@pitchdance.com and we will take care of it. Depending on where you live, you may have further rights under local law, which we honor.
Contact
Questions about your privacy? Email support@pitchdance.com.