Privacy Policy
Last updated: 21 August 2026
Who we are
Waybound (waybound.uk) is operated by D00M (sole trader), the data controller for the information described below. Contact: support@waybound.uk.
What we collect
- Account info: email address and password (handled by our authentication provider, Supabase)
- Profile content you add: username, display name, bio, avatar/banner images, links, accent colour and theme choices, and any song or widget links you connect
- Payment info (Premium only): handled directly by Stripe — we don't see or store your card details
- Basic usage data: link click counts on your own page, and standard server logs (IP address, browser type) kept by our hosting provider
Why we collect it
To create and run your account, display your public page, let you customize it, process Premium payments, and keep the service secure. Profile content you add is used only to display your public page as you've configured it.
Who we share it with
- Supabase — database, authentication, and file storage
- Stripe — payment processing for Premium subscriptions
- Vercel — hosting and infrastructure
- Cloudflare — domain and DNS
- YouTube / TikTok — if you connect a widget, we send the channel/profile URL you provide to look up a public follower or subscriber count. We don't send any other personal data.
We don't sell your data, and we don't use advertising or tracking cookies.
How long we keep it
We keep your account data while your account is active. If you delete your account, we delete your profile, links, and associated data, except where we're required to keep records (e.g. payment records for tax purposes).
Your rights (UK GDPR)
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Complain to the UK Information Commissioner's Office (ICO) if you think we've mishandled your data
To exercise any of these, email support@waybound.uk.
International transfers
Some of our providers (Supabase, Stripe, Vercel) may process data outside the UK. Where they do, they rely on recognised legal safeguards such as Standard Contractual Clauses.
Children
Waybound isn't intended for anyone under 13. We don't knowingly collect data from children under 13.
Cookies
See our Cookie Policy for details.
Changes
We may update this policy occasionally. We'll change the "last updated" date above when we do.