Effective August 20, 2026
Privacy Policy
This notice explains what Impulsum collects, why we use it, who receives it, how long we keep it, and the choices available to you.
Who controls your data
Impulsum is operated by Monolith Systems. Privacy questions and rights requests can be sent to monolith.inquiries@gmail.com or submitted from the account Privacy Center.
Information we collect
- Account data: email, username, display name, authentication identifiers, account status, and preferences.
- Social data: friend requests, accepted connections, and blocks.
- Service data: launcher entitlements, download records, membership status, security logs, IP-derived rate-limit identifiers, and request timestamps.
- Technical storage: session and privacy-choice data stored in your browser.
Why and on what basis
- Provide accounts, secure downloads, friendships, and support: necessary to perform our service agreement.
- Prevent abuse, secure accounts, enforce community rules, and maintain audit records: our legitimate interests and legal obligations.
- Optional analytics or marketing: consent, if these features are introduced and enabled by you.
Recipients and international transfers
We use Supabase for authentication and database services, Netlify for hosting and server functions, Cloudflare R2 for launcher storage, Resend for transactional email, Stripe if memberships are enabled, and Discord where you choose to use the community. Providers process data under their own contractual and security terms. Some processing may occur in the United States; where required, appropriate transfer safeguards must be used.
Retention
Account and social data is kept while your account is active. Download and security records are kept only as reasonably necessary for fraud prevention, support, and legal obligations. Open privacy requests are retained through completion and a limited compliance record may remain afterward. Browser privacy choices stay until you clear them or change them.
Your rights
Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. EU/EEA users may complain to their local data protection authority. Eligible US state residents may also have rights to know, correct, delete, and opt out of sale, sharing, or targeted advertising. Impulsum does not currently sell personal information or use it for cross-context behavioral advertising, and we do not discriminate for exercising privacy rights.
Use the account Privacy Center for an export or deletion request. We may verify your identity before acting. Authorized-agent requests should email us with proof of authority.
Children
Impulsum is a general-audience service and is not intended for children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information so we can investigate and remove it. Users must also meet any higher minimum age required in their country or have valid parent or guardian authorization.
Security and changes
We use access controls, row-level database security, short-lived download links, rate limits, and audit logging. No system is perfectly secure. Material policy changes will be posted here with a new effective date.