Privacy

Privacy, in plain words.

Last updated: 7 November 2026. This is what we collect, why, and who else touches it.

Who we are

Neural Rhythms is a trading name of CWK Solutions, owned by Suman Kumar. Questions about your data go to support@neuralrhythms.io.

What we collect, and why

  • Your email, for the free pack or a wallpaper pack. We use it to send what you asked for. It is stored in our database and sent through Amazon SES, Amazon's email service. We do not sell it or share it.
  • When you buy. Dodo Payments collects your name, email, country and card details. Your card details never reach us. We keep the order id, email, name, amount, currency and payment id.
  • The Creator Pass. The same as when you buy, plus the Pass's status and billing dates from Dodo Payments, and how many times each album was downloaded each month (to apply the download limit).
  • The claim form. Your email, channel link, video link and note.
  • The contact form. Your name if you give it, your email, the topic and your message. They are stored in our database and emailed to our own inbox so we can answer.
  • Show us your video. On the creators page: your name, email, video link and note. If we approve it, your name and video link are shown on the creators page. Your email is not.
  • Scene voting. A random vote id kept in your browser, a hashed version of your IP address, your browser's user-agent text and whether you are on a phone or a computer. We keep these so we can spot abuse of the vote.
  • Visits. We count them, as the next section explains.

Counting visits, and cookies

  • Our own visit counter. The page, the referrer, campaign tags, and your country and city from Cloudflare, stored in our database with no cookie. A random id is kept in the browser tab only (session storage) to tell one visit from the next; in the EU, the EEA, the UK and Switzerland we keep nothing in your browser until you say yes. When you play a song, your city and country may appear, with no name or other detail, in the owl's pop-up for up to six hours ("Someone in Stockholm, Sweden played …").
  • Our analytics (CWK Stats, stats.codewithkolin.com). Our own analytics service, run by us on Cloudflare. It sets two cookies, datafast_visitor_id and datafast_session_id (the names come from DataFast, which we used before), to recognise a returning visitor and to see which pages lead to sales. Its script and its events go through our own address (neuralrhythms.io/nr/…). It stores the page, the referrer, campaign tags, your browser and device type, and your country, region and city from Cloudflare; not your IP address. When you buy, its visitor id is passed to Dodo Payments with the order, and the sale (amount, currency, payment id and email) is recorded so it can be linked to the visit.
  • In the EU, the EEA, the UK and Switzerland, the analytics script loads only after you say yes in the banner, and nothing is counted with cookies before that. You can change your mind any time with "Cookie settings" at the bottom of every page; saying no removes its cookies.
  • Search engines and AI crawlers. When a program such as Googlebot or ChatGPT's crawler asks for a page, the page's address, the crawler's name and its IP address are sent to CWK Stats to count those visits; it keeps the crawler's name and the page, not the address. This is about programs, not people.

Why we're allowed to use it

  • To send what you asked for (a free pack, your order and its links, your Creator Pass, an answer to your message or claim): to carry out what you asked us to do.
  • Order and payment records: the law, for tax and accounting.
  • Our own visit counter, the vote's abuse checks and the limits that stop floods of requests: our legitimate interest in running a safe site and knowing which pages help. None of these hold your name or email.
  • The analytics cookies (CWK Stats): in the EU, the EEA, the UK and Switzerland, your consent, which you can take back any time. Elsewhere, our legitimate interest in knowing which pages, posts and videos bring people and sales.

Services we use

The site and our analytics (CWK Stats) run on Cloudflare: Workers, the database and file storage. Its fonts come from our own address too. Emails from us (your free pack, your order and its links, Creator Pass messages, answers to your messages) are sent through Amazon SES.

The Study, Late Night Coding, Rainy Café and Sleep rooms, and the "Live now" player on the home page, play our own YouTube live streams. Until you press play you see our own picture; the YouTube player (from youtube-nocookie.com) loads only when you do. Other YouTube videos on the site also load only when you press play. Featured creator videos on the creators page are YouTube embeds that load as you scroll. YouTube's own privacy rules apply to all of these once they load.

Comments on our Instagram and Facebook posts reach us through Meta. We answer them ourselves: an AI assistant (Anthropic's Claude) drafts each reply from the comment and the commenter's username, and the draft comes to us in a private Telegram chat, where we choose whether to send it. Those platforms' own privacy rules apply to anything you write there.

Some of these services process data outside the UK and EU, for example in the United States.

How long we keep it

Sign-up emails stay until you ask us to delete them. Order and Creator Pass records stay as long as needed for the license, tax and accounting.

Messages from the contact form, claim requests and creator videos stay for up to two years after we last wrote to each other.

Visit-counter, analytics and scene-vote records stay until we delete them; only a sale's analytics record holds an email.

Your browser may also keep small settings, such as the volume, on your device.

Your rights

You can ask to see, correct or delete your data. Write to support@neuralrhythms.io. People in the EU or UK may also complain to their data protection authority.

Children and changes

This site is not meant for children.

We may update this page. The date at the top says when.