← Home

Privacy Policy

Last updated: August 10, 2026

Overview

THRY ARCHIVE LLC (“THRY.ARCHIVE,” “we,” “us,” or “our”) operates the website thryarchive.com and provides tools, services, and a merchandise shop. This Privacy Policy explains how we collect, use, store, and protect your information when you use any part of our platform.

Information We Collect

Account Information

When you create a dashboard account (through tool access applications or bundle checkout), we collect your name, email address, and artist or label name. Your password is hashed using bcrypt before storage and is never stored in plain text.

Contact & Application Forms

When you submit a contact form, we collect your name, email address, inquiry type, and message. When you apply to join the team, we additionally collect your role, location, social media handles (Instagram, TikTok, Twitter/X), portfolio URL, experience, and a personal statement. When you apply for tool access, we collect your name, email, artist name, role, and a message.

Shop & Payment Information

When you purchase merchandise, payment processing is handled entirely by Stripe. We do not directly collect or store your credit card number, billing address, or other payment details. Stripe collects your email address and shipping address on our behalf to fulfill your order. After checkout, we receive your email, shipping name, and shipping address from Stripe to coordinate order fulfillment through our print-on-demand partners.

Smart Links

When you visit a smart link page, we track aggregate click counts per platform (e.g., Spotify, Apple Music). No personal information is collected from clicks. If you submit a presave or contest entry form on a smart link page, we collect your name and email address.

Blog Engagement

When you interact with blog posts, we track anonymous view counts (rate-limited to one per IP per 24 hours). Like and dislike reactions are anonymous. If you leave a comment, we collect the display name you provide and your comment text.

Academy

When you apply to the Academy as a student or teacher, we collect your name, email, background, goals, portfolio URL, and course-related information. Academy accounts store your email, name, and a hashed password.

YouTube & Google Data (THRY.VISUAL)

When you connect your YouTube account through THRY.VISUAL, we access the following through Google OAuth 2.0:

  • Your YouTube channel name and ID (to display which channel you are uploading to)
  • Permission to upload videos to your YouTube channel on your behalf

We store your OAuth refresh token securely to maintain your YouTube connection between sessions. We do not access your existing YouTube videos, playlists, subscribers, analytics, or any other YouTube data beyond what is listed above.

Client-Side Processing

Several tools process data entirely in your browser without sending it to our servers. The QR Code Generator runs fully client-side. Audio files and cover art uploaded to THRY.VISUAL are processed in your browser and are never stored on our servers.

IP Addresses

We use your IP address for rate limiting on login attempts, form submissions, and other API endpoints. IP addresses are held in server memory only for the duration of the rate-limit window (typically 15 minutes) and are not persisted to disk or any external storage.

Cookies & Local Storage

Cookies

We use the following cookies, all strictly necessary for authentication:

  • dashboard-session - Authenticates your dashboard login. HTTP-only, secure in production, expires after 30 days.
  • academy-session - Authenticates your Academy login. HTTP-only, secure in production, expires after 30 days.
  • NextAuth session - Used for administrative access only. JWT-based, expires after 8 hours.

We do not use any analytics cookies, advertising cookies, or third-party tracking cookies.

Browser Local Storage

We use your browser’s local storage for the following purposes:

  • Remembering whether you already submitted a presave or contest entry
  • Storing your blog like/dislike reactions and view state
  • Remembering your comment display name
  • Storing your shopping cart contents

How We Use Your Information

  • To provide, maintain, and improve our services and tools
  • To authenticate your account and manage tool access
  • To process and fulfill merchandise orders
  • To send transactional emails (account confirmation, password resets, order confirmations, application responses)
  • To upload videos to YouTube on your behalf when you use THRY.VISUAL
  • To respond to contact form inquiries and applications
  • To prevent abuse through rate limiting

We do not use your information for marketing, advertising, or profiling purposes. We do not send promotional emails.

Data Storage & Security

Account data, application records, and other persistent information are stored securely using Vercel Blob Storage with private access controls. All data is transmitted over HTTPS. Passwords are hashed with bcrypt before storage. Authentication tokens are signed with HMAC-SHA256.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

Our platform integrates with the following third-party services:

  • Vercel - Hosting, serverless functions, and blob storage. See Vercel's Privacy Policy.
  • Stripe - Payment processing for merchandise purchases. Stripe collects payment information, email, and shipping addresses directly. See Stripe's Privacy Policy.
  • Resend - Transactional email delivery. Email addresses are shared with Resend solely to deliver emails you trigger (confirmations, password resets, application notifications). See Resend's Privacy Policy.
  • Google / YouTube - OAuth authentication and video uploads via the YouTube Data API v3 (THRY.VISUAL only). See Google's Privacy Policy.
  • Printify / Printful - Print-on-demand order fulfillment. Your shipping name and address are shared with these providers to print and ship your merchandise order.

Google API Services User Data Policy

THRY.VISUAL’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google data to provide the video upload functionality you request and do not use it for any other purpose.

Revoking Access

You can disconnect your YouTube account from THRY.VISUAL at any time using the “Disconnect” button in the tool. This deletes your stored OAuth tokens from our servers.

You can also revoke access from your Google Account permissions page.

Data Retention

We retain account data for as long as your account is active. Application data is retained for the duration of the review process and may be kept for recordkeeping purposes. OAuth tokens are retained until you disconnect your YouTube account or revoke access. Blog comments are retained until manually removed. Smart link entries are retained for the duration of the associated campaign.

You may request deletion of your account and all associated data by contacting us.

Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

Contact

For questions about this Privacy Policy or to request data deletion, contact us at thryarchive.com/contact.