Privacy at ManyPasts.

This notice explains how ManyPasts uses information to provide the website and membership. Email support@manypasts.com about privacy or your account.

Accounts and membership

We use your email address and account identifier to provide login, recovery and membership access. Supabase processes authentication and stores account information. Passwords are handled by Supabase Auth; our application does not store readable passwords.

Stripe Managed Payments and Link handle payment details, invoices and subscription management. We store the Stripe identifiers, subscription status and access dates needed to operate your membership. We do not store your card number.

Video and maps

Choosing to play a film connects your browser to Mux or YouTube. These providers receive technical information such as your IP address and playback requests. Mux playback uses temporary access tokens for protected films; we disable the player’s optional viewing analytics. Map resources may involve requests to mapping providers, with attribution available in the map.

Cookies and communication

Authentication cookies keep you signed in. Some map preferences may be saved on your device. Registration does not opt you into marketing emails. Essential account, confirmation and recovery messages are part of providing the service.

Security and retention

We keep limited operational records to investigate failures, prevent abuse and reconcile payments. Account actions are rate limited using hashed identifiers. Account data is retained while needed to provide the service; payment and accounting records may need to be retained after cancellation. We do not sell personal information.

Your choices

You can sign out, reset your password and cancel future membership renewals. Contact us to request access, correction or deletion of your information. Deletion and subscription cancellation are separate actions; cancel renewal before closing an account.

We use account data to provide the service you request and limited security records to protect it. Our hosting and authentication providers may process information outside your country under their data protection arrangements. You can contact your local data protection authority if you have an unresolved concern, including the UK Information Commissioner’s Office at ico.org.uk.