Privacy

• Visiting yogasync.app
• Asking us to contact you, or asking for support
• The services we use
• Where information is kept
• How we protect it
• How long we keep it
• Your choices and requests
• Children
• Changes, and how to reach us

• Delivery and security. The website runs on a server at DigitalOcean in New York. Every request passes through Cloudflare first. Cloudflare receives your IP address and the details your browser sends, such as the page requested and the browser type. Our server does not keep a record of each request. It logs only errors, and those logs are limited by size rather than kept for a set time. Cloudflare keeps its own records of requests as its privacy policy describes.
• Fonts. Some fonts load from Google Fonts. Google receives your IP address and browser details with that request.
• Cookies. yogasync.app sets no cookies for visitors. Staff who sign in to the website's admin get a cookie that keeps them signed in. Cloudflare may set its own security cookies during the contact form's check (below).
• Visit details in your browser. The site stores the first page you opened and where the visit came from in your browser's session storage. That means the campaign tags in the link you followed, or the site that sent you. The details are deleted when you close the tab. They leave your browser only if you send a form, which sends them with your details.
• Analytics. We use Umami to measure page visits and named interactions without analytics cookies. Umami still uses technical identifiers to tell visits apart. It receives page addresses (with only campaign tags kept from the query), the referring site, page title, screen size, browser language, and named clicks and form steps. It works out browser, operating system, device type and country from the request. Contact-form values are not sent to Umami. We export visit and event records and keep them on a company backup in Kansas.
• Privacy signals. When your browser sends Global Privacy Control, we do not load our Umami analytics script. Website delivery, security, and externally hosted fonts still involve the services described here. Our website does not change its operation in response to Do Not Track signals.
• Monitoring. healthchecks.io watches our backups and form delivery. It receives counts only.

• What you send. The contact form asks for your first and last name, email, whether your studio is open or opening, and its name or working name. The visit details above go with it. The support form asks for your name, email, your studio's name if you give it, a topic, and your message.
• What we use it for. We use these details to respond to your studio inquiry or support request.
• The security check. Both forms use Cloudflare Turnstile. It loads when you first click into a form, and it checks your browser when you send it. It sees your IP address, browser details, a fingerprint of your secure connection, and the site you are on. Cloudflare uses these to tell people from bots for us, and also on its own account to improve its bot detection. It may set the cookies cf_chl_rc_i, cf_chl_rc_ni, cf_chl_rc_m and cf_clearance. Our server sends Cloudflare only the result of the check.
• Where it goes. Our website database keeps a contact form only until Brevo, our contact and email service, confirms receipt. That usually takes under a minute and never more than 30 days. After that, your details are a contact in Brevo. A support request is kept only until Brevo emails it to our support inbox, on the same 30-day limit. It is not added to our contacts. A keyed, scrambled code made from your email is kept for 24 hours to stop duplicate forms.
• Email about Yoga Sync. Sending the contact form lets us answer you. It is not permission to send you newsletters. We send news and promotions only if you tick a separate, unticked box: "Also send me Yoga Sync news, product updates, and promotional emails. I can unsubscribe at any time." Every such email carries an unsubscribe link. Emails sent through Brevo may contain tracking images and individualized links that record email opens and link clicks associated with your email address.
• Logs. Nothing you type is written to our logs or into a web address.

• Our website server does not accept web connections directly from the internet. Cloudflare passes requests to it through a tunnel.

If an incident requires notification, we will notify affected people, studios, and authorities as and when applicable law requires. For information held for a studio, we notify the studio as required by law and our processing terms.

We use proportionate verification and check a representative's authority. We do not require verification where the law prohibits it. We ordinarily respond within 45 days, meet shorter applicable deadlines, and explain any permitted extension before the initial deadline.

To appeal a refusal, reply to our decision or email with Privacy appeal in the subject. We respond to appeals within 45 days and provide applicable regulator complaint information. We do not unlawfully discriminate for exercising privacy rights.

You can also turn on Global Privacy Control to stop our analytics, close the tab to clear visit details, and use the unsubscribe link in any Yoga Sync marketing email.

Syncaterra LLC, a Kansas limited liability company doing business as Yoga Sync. 9409 W 163rd Pl, Overland Park, KS 66085. [email protected].