Your information, treated with care.

We may collect information you provide directly, including:

• Your email address and account authentication details.
• Information submitted through contact, interest or location forms.
• Messages you send us and records of support or account requests.

We may also receive limited technical information such as your IP address, browser type, request timestamps and pages or protected media requested. We do not receive or store your account password in our application.

We use personal information to:

• Create, confirm and manage member accounts.
• Provide and secure access to member-only audio and video.
• Respond to enquiries and expressions of interest.
• Operate, protect and improve the website and member experience.
• Comply with legal obligations and prevent misuse or fraud.

We do not sell personal information. Where consent is required for a particular communication, you may withdraw it at any time.

We use trusted service providers to operate this website. Supabase provides account authentication and sends confirmation emails. Cloudflare hosts the website, runs security functions and delivers protected media.

These providers process information according to their own privacy terms and our service arrangements. Data may be processed in countries other than your own, with safeguards applied where required.

The member portal uses a strictly necessary HTTP-only cookie named sohma_media_session. It allows our server-side security function to verify requests for protected media. It expires no later than the associated authentication token and is cleared on logout.

Supabase may use browser storage to restore and refresh your login session. We also store the time a confirmation email was requested so the website can avoid sending unnecessary duplicate emails. These items are used for account functionality, not advertising.

We keep personal information only for as long as needed for the purposes described here, including account administration, security and legal requirements. Retention periods vary by record type.

We use reasonable technical and organisational safeguards, including encrypted connections, verified access tokens and HTTP-only session cookies. No online system can be guaranteed completely secure.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the use of your personal information, and to receive a portable copy of certain data.

To make a request, use our contact page. We may need to verify your identity before completing the request. You may also complain to your local data protection authority.

We may update this policy as our services or legal requirements change. The date at the top of this page shows the latest revision.

Questions about this policy or our handling of personal information can be sent through the SOHMA contact page.