Privacy Notice

1. Who we are and what this covers

AdamsLocal LLC operates GhostSandbox and is responsible for the personal information described in this notice. This notice covers ghostsandbox.com, its experiments, purchase fulfillment, licensing, and support. A third-party site such as Stripe applies its own privacy notice when you leave GhostSandbox for checkout.

2. Information we handle

Stripe processes payment credentials and may collect billing or fraud-prevention information. AdamsLocal does not receive full card numbers or card security codes.

3. What stays on your device

The renderer computes visual frames locally with Canvas or WebGL. Pointer positions, strikes, material selectors, and experiment controls are not intentionally sent to AdamsLocal. A seed placed in the page URL can appear in the requested URL and therefore in ordinary hosting logs.

The tone experiments use the Web Audio API only after you activate a sound control. They synthesize sound locally and do not request microphone access, record audio, upload listening behavior, or infer health information.

4. Why we use information

• Provide and secure the site: deliver pages, diagnose errors, prevent abuse, and maintain availability.
• Perform a contract: confirm payment, deliver files, bind a Casting to its domain, preserve provenance, provide support, and process refunds.
• Operate the business: reconcile transactions, keep financial records, manage disputes, and protect our rights.
• Comply with law: meet tax, accounting, fraud-prevention, and valid legal-request obligations.

Where a legal basis is required, we rely on performance of a contract, compliance with legal obligations, and legitimate interests in operating and securing a small creative business. We do not use customer personal information to train the GhostSandbox renderer or a machine-learning model.

5. Providers and disclosures

We disclose the minimum relevant information to providers acting for us or providing their own checkout service:

• Vercel hosts the site and processes request, security, and function-log data.
• Stripe hosts checkout, processes payments, supports fraud prevention, and stores transaction records.
• Resend delivers internal fulfillment alerts containing relevant order and contact details.
• Our ordinary email, accounting, legal, and technical providers process only information needed for their work.

We may also disclose information when required by a valid legal process, to protect a person's safety or rights, or as part of a business reorganization where the recipient must continue to respect this notice.

These providers may process information in the United States and other countries. Their privacy terms and legally recognized transfer safeguards apply to their processing.

6. Cookies, analytics, and tracking choices

As of the effective date, GhostSandbox does not run advertising pixels, cross-site behavioral analytics, or third-party marketing cookies. The only browser storage written by the public page is the theme preference. Stripe may use cookies and similar technologies on its separately hosted checkout.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. Because GhostSandbox does not perform that tracking, browser Do Not Track and Global Privacy Control signals do not change the site's behavior. If those practices change, we will update this notice and honor legally required opt-out signals.

7. How long information is kept

• The theme preference remains on your device until you clear site data or replace the preference.
• Hosting and security logs follow Vercel's configured retention periods and may be kept longer when needed to investigate abuse or an incident.
• Transaction and accounting records are generally kept for seven years after the transaction, or longer when law or an active dispute requires.
• Seed, Licensed Domain, build identifier, delivery date, and license status may be retained for the duration of a perpetual license so we can prove exclusivity and provide support. We minimize the customer details attached to that record.
• Project notes and support correspondence that are not part of a license or accounting record are deleted or anonymized when no longer reasonably needed.

8. Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about disclosures. You may also have a right to appeal a response or complain to your local privacy authority. We will not discriminate against you for making a privacy request.

Send requests to hello@adamslocal.com. We may need to verify that you are the person connected to the information. We may retain transaction or license data when law, fraud prevention, dispute resolution, or an ongoing license requires it. Requests about data controlled independently by Stripe or another provider should also be sent to that provider.

9. Children

GhostSandbox is a general-audience creative and commercial site, not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Purchases must be made by an adult. If you believe a child sent us personal information, contact us so we can review and delete it where appropriate.

10. Security and changes

We use hosted checkout, access controls, signed payment webhooks, data minimization, and restricted operational credentials to reduce risk. No online service can guarantee absolute security.

We will update this page and its effective date before or when our practices materially change. Tracking, advertising, accounts, uploads, or materially new uses of personal information require a new review rather than silent expansion of this notice.

11. Contact