Privacy

Last updated 19 September 2026.

The short version: if you never sign in, nothing about you leaves your browser. If you do, we keep your email, your saved courses and the marble images you upload — and you can export or delete all of it yourself, from inside the editor.

This website

nastan.io is a set of static pages. It sets no cookies, shows no advertising and loads no third-party fonts. Our hosting provider processes your IP address for the purpose of delivering the page, as any web host does.

We do count visits, using Cloudflare Web Analytics. It is a cookieless measurement tool: it stores nothing on your device, gives you no identifier, and cannot recognise you on a later visit or on any other website. For each page view it records the page you looked at, the site that linked you here if any, and coarse technical facts such as country, browser and whether you are on a phone or a desktop. None of that identifies you, none of it is combined with anything else we hold, and none of it is sold or shared with advertisers.

We look at this for one reason: to find out how many people reach nastan.io and where they came from. There is no profile of you behind it, because there is nothing to build one from.

The editor, without an account

You can build, race and export videos without signing in. In that case everything you make — your course, your daily export count, any marble images you add for the session — is stored only in your own browser's local storage. Videos are rendered on your device and are never uploaded to us. Clearing your browser data removes all of it.

The editor does send us a small number of anonymous usage events, so we can see whether the product works for people who are not us: that a visit happened and whether a link brought it, that the editor finished loading and how long that took, that someone edited a course, started a race, started or finished an export, was shown the sign-in card, signed in, or started or finished an upgrade. That is the complete list — ten events, nothing else.

These events carry no personal data and no cookie. They contain no email address, no account identifier, no course, no image and no file name, and we never store your IP address against them. To tell one visit apart from another we use a random number held for the life of the browser tab and thrown away when you close it — not a cookie, not stored on your device, and impossible to link to you, to a later visit, or to anything you do on any other website. Signing in changes none of this: the events are sent the same way whether or not you have an account, and they are never connected to it.

The editor, with an account

When you create an account we store:

• Your sign-in identity — your email address, or the identifier provided by the sign-in service you choose (for example Google).
• Your courses — the race courses you choose to save to your account.
• Your uploads — the images you put on marbles. They are private to your account and are not shown to other users.
• Your plan — whether you are on Free or Pro, and the billing reference that lets us check it.

This data is stored with our database and authentication provider, Supabase. We use it only to run the service for you: to sign you in, to show you your saved courses and images, and to apply the limits of your plan.

Payments

Pro subscriptions are processed by Stripe. Your card details go to Stripe, not to us; we never see or store your card number. We keep a Stripe customer reference and your subscription status so the editor knows you are Pro.

What we do not do

• We do not sell or share your data with advertisers.
• We do not use your courses, images or videos for marketing, training or examples.
• We do not publish anything you make. Posting a video anywhere is your decision.
• We do not track you across websites, and nothing we use is capable of it.
• We do not build a profile of you from how you use the editor.

Your rights and your data

From inside the editor, open Account and use Export my data to download everything we hold about you, or Delete my account to remove it. Deleting your account removes your courses and uploads from our systems.

Under the GDPR you also have the right to access, correct, restrict or object to the processing of your personal data, and to lodge a complaint with a supervisory authority (in France, the CNIL). For any request, write to contact@nastan.io.

Retention

Account data is kept for as long as your account exists. Data stored only in your browser is under your control and never reaches us.

Changes

If this page changes in a way that matters, we will update the date at the top. The current version is always at nastan.io/privacy.