Last updated: July 29, 2026

1. Introduction

Welcome to Etalage ("we", "us", or "our"). Etalage is a platform that enables studio owners to share video content and programs with their members. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

This policy applies to:

Members — people who use the Etalage app or website to access studio content
Studio Owners (Tenants) — people who manage a studio and publish content on Etalage

2. Information We Collect

2.1 Information from Members (App Users)

Account information:

Email address
Display name
Password (encrypted, managed by our authentication provider)

Profile information:

Avatar/profile photo (optional)
Preferred language
Timezone

Usage data:

Videos watched, including watch duration, progress, and completion status
Programs enrolled in, progress, and completion status
Videos saved and liked
Search queries within the app
Pages viewed within the app
App open events and general activity timestamps

Technical data:

Platform type (Android, iOS, or web)
App version number

Payment data (if applicable):

We store a reference ID linking to your Stripe account. We do not store credit card numbers, bank account details, or other payment credentials — these are handled entirely by Stripe.

Support data:

Messages and attachments submitted through support requests

2.2 Information from Studio Owners

Account information:

Email address, display name, password

Studio information:

Studio name, description, tagline
Logo and branding configuration (colors, images)
Language and content settings

Content uploaded:

Videos, thumbnails, program descriptions, attachments (PDFs, images)

Payment configuration:

Stripe Connect account details for receiving payouts
Product and pricing definitions

2.3 Information We Do NOT Collect

No health data. We do not collect, store, or process any health-related information.
No location data. We do not track your GPS location or IP address.
No device identifiers. We do not collect advertising IDs (IDFA, GAID), hardware identifiers, or browser fingerprints.
Analytics and advertising, consent-based. The member app (mobile + web) does not run any third-party analytics or advertising trackers. Our marketing site (etalage.com) and the studio webapp use Google Analytics 4 and Google Ads under Consent Mode v2 with all signals defaulting to "denied", so we send only cookieless, anonymised signals until you opt in. The marketing site additionally uses the Meta (Facebook) Pixel; because it sets an identifying cookie, it stays off until you opt in via our cookie banner in the EU, EEA, and UK, and runs by default only where an opt-out model applies (for example the US). It also uses PromptWatch to measure how many visitors arrive from AI assistants, which runs without cookies and stores nothing on your device. See section 5 for details and how to change your choice.

3. How We Use Your Information

We use your information to:

Provide and maintain the Etalage platform
Authenticate your identity and manage your account
Display personalized content (e.g., continue watching, recommended programs)
Track video watch progress so you can resume where you left off
Process payments and manage subscriptions via Stripe
Send transactional emails (e.g., login codes, subscription confirmations)
Provide customer support
Improve and optimize our services
Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. Third-Party Services

We share data with the following service providers, solely to operate the platform: Service Purpose Data Shared Supabase Authentication, database, file storage Account data, profile, usage data Bunny.net Video hosting and streaming (CDN) Video files uploaded by studio owners Stripe Payment processing Customer ID, subscription details, payment transactions Resend Transactional email delivery Recipient email address, email subject

These providers process data on our behalf and are contractually bound to protect your information.

5. Cookies, Local Storage, and Analytics Consent

We keep cookies and local storage to a minimum:

Session tokens — to keep you logged in
Tenant preference — to remember which studio you are managing (studio owners only)
Analytics consent state — a single localStorage entry ( etalage_consent_v1 ) recording your opt-in decision so we don't ask again on every visit.
Advertising cookies — _fbp (and _fbc ), set by the Meta Pixel only after you opt in, or by default in opt-out regions. See 5.3 below.

5.1 Google Analytics & Google Ads (opt-in)

We use Google Analytics 4 and Google Ads, but never as a default. Both tags load under Google Consent Mode v2 with all four signals ( analytics_storage , ad_storage , ad_user_data , ad_personalization ) set to denied by default. Until you actively opt in, Google receives only anonymised, cookieless signals — no identifying cookies are stored on your device and no personal data is shared.

Studio owners are asked to opt in once, via a separate checkbox on the signup form (next to — never bundled with — the Terms checkbox). Opting in is entirely optional and signing up works exactly the same either way.

Withdrawing consent is as simple as granting it: sign in to your studio dashboard, open Profile → Privacy & analytics, and flip the toggle off. The change takes effect immediately and is mirrored to Google so no further identifying events are sent. We do not retro-actively delete past events; Google's own retention policy (currently 14 months) governs how long events from consenting sessions remain queryable.

5.2 PromptWatch (AI search visibility)

On etalage.com we use PromptWatch to measure how many visitors reach us from AI assistants such as ChatGPT, Perplexity, and Gemini. On each page load it sends a single anonymous event containing the page address, the referring URL, your browser language, and your timezone. PromptWatch sets no cookies and stores nothing on your device (no localStorage, no identifiers), so there is nothing to opt in to or withdraw.

On etalage.com (the marketing site), visitors in the EU, EEA, and UK see a small cookie banner, and Google's tags stay cookieless until they choose. PromptWatch stores nothing on your device either way. Where an opt-out model applies (for example the US), analytics and advertising may run by default. You can revisit your choice anytime via Cookie preferences in the footer.

5.3 Meta (Facebook) Pixel

Our marketing site uses the Meta Pixel to measure how well our ads work. When active, it sets a first-party _fbp cookie (and _fbc if you arrive from a Meta ad) to attribute visits, and it may share event data with Meta. Because these are advertising cookies, the pixel does not load until you opt in via our cookie banner in the EU, EEA, and UK; it runs by default only where an opt-out model applies (for example the US). Declining, or choosing Cookie preferences and then Decline, stops it and clears the _fbp and _fbc cookies.

6. Data Retention

Active accounts: Your data is retained as long as your account is active.
Anonymous/guest accounts: Automatically deleted after 30 days of inactivity.
Deleted accounts: When you delete your account, your personal data is removed. Aggregated, non-identifiable usage statistics may be retained.
Video watch history: Retained as long as your account is active and the studio exists.
Support requests: Retained until resolved, then archived.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encrypted data transmission (TLS/HTTPS)
Encrypted storage of sensitive credentials
Row-level security policies ensuring data isolation between studios
Members have no direct database access — all data is served through secured API endpoints

8. Your Rights

Depending on your jurisdiction (including under GDPR), you have the right to:

Access your personal data
Correct inaccurate data (via your profile settings)
Delete your account and associated data
Export your data
Withdraw consent at any time
Object to certain processing of your data

To exercise these rights, contact us at privacy@etalage.com.

9. Children's Privacy

Etalage is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

10. International Data Transfers

Your data may be processed in countries outside your own (including the EU and US) through our service providers. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

Etalage Email: privacy@etalage.com

Privacy Policy