LONGWAVE Sign in
Your data

Privacy.

Last updated · June 2026

The short version: Longwave collects almost nothing, sells nothing, and uses only privacy-friendly, cookieless analytics that can't identify you. Here's the slightly longer version.

What we collect

When you create an account, Supabase (our authentication service) stores your email address and a hash of your password — never the password itself. Alongside that, we keep your subscription status so the site knows what you can watch. That's essentially the whole list.

Payments

Payments are handled entirely by Stripe. Your card details never touch our servers — they go straight to Stripe, and Stripe's own privacy policy governs that payment data. All Longwave sees is whether your subscription is active and which tier it is.

Video delivery

The episodes are streamed by Cloudflare. Like any service delivering video, Cloudflare keeps standard server logs (things like IP addresses and request times) to run the network. We don't use those logs to profile you.

Analytics

We use PostHog in cookieless mode to understand aggregate behaviour — how many people start an episode, how many reach the subscribe page, that kind of thing — so we can improve the site. It doesn't follow you around the web and can't identify you. If you arrive from a tagged link (say, a link in a TikTok bio), we may record that source — a plain label like "tiktok" — alongside a subscription, so we know which channels are working. That's a label, not personal data.

Cookies & local storage

A couple of small things live in your browser: a session token that keeps you signed in between visits, and a little local storage used for the cookieless analytics above and to remember things like which episodes you've already watched. There are no advertising cookies and no cross-site trackers, and the analytics can't identify you. If you sign out, the session token goes away.

Emails

We only send account and transactional emails — sign-up confirmations, password resets, billing receipts, that kind of thing. No marketing emails unless you explicitly opt in to them, ever.

Your data, your call

Want a copy of your data, or want it gone? Email us and we'll export it or delete your account and everything attached to it. Deletion happens within 30 days. No retention dark patterns, no "are you sure?" gauntlet.

Third parties

Here is the complete list of services Longwave runs on: Supabase (accounts), Stripe (payments), Cloudflare (video delivery), Vercel (hosting), and PostHog (privacy-friendly, cookieless analytics). Each one receives only what it needs to do its job, and nothing is shared with anyone else.

Changes & contact

If this policy changes, the "last updated" date at the top will change with it. Questions, export requests, deletion requests, or anything else: contact@raphaelurbain.com.