Privacy Policy

Visiting this website

The site is hosted by Cloudflare. Delivering and protecting it involves processing technical request information such as your IP address, requested URL, browser details, and request time. Cloudflare may process security and operational logs under its Privacy Policy.

We do not add advertising trackers, behavioral analytics, or marketing cookies to this site. Fonts and product preview images are served with the site. There is no Island website account or newsletter form. External services you choose to visit, including Creem checkout and GitHub, have their own privacy and cookie practices.

Purchases and payment data

When purchases are enabled, Creem will process checkout information including your name, email, billing information, payment details, and transaction information as merchant of record. We can receive customer and order information needed to provide your purchase, handle support and refunds, and maintain business records, such as your purchase email, order reference, product, amount, transaction status, and license information.

We do not receive or store your full card number or security code in the Island app or this website. Creem and its payment providers handle payment credentials. See Creem's Privacy Notice for its processing, retention, and your rights relating to that service.

We use purchase information to fulfill the contract, verify entitlement, address billing problems, prevent misuse, and meet applicable accounting and legal obligations. We do not sell customer information or use purchase details for advertising profiles.

Contacting support

If you email us, we receive your email address, message, attachments, and any order or diagnostic information you choose to provide. We use these to respond, investigate problems, and resolve your request. Email delivery is handled by our email service providers.

Please remove secrets, full license keys, sensitive project content, and unrelated personal information from screenshots or logs. We do not need your card details or account passwords to provide support.

The app and local plugin data

Island stores app settings and plugin data on your device. The current app does not send activity analytics to Brighteng. Network requests used to fetch plugin catalogs, packages, previews, or external plugin services expose normal connection information to the service receiving them.

Agent Pulse: with your explicit hook setup, the plugin records local session metadata such as provider, project folder name, session and turn identifiers, status, tool name, timestamps, pending-request identifiers or input hashes, and process/window identity used to return to a session. It does not retain or transmit prompts, transcripts, terminal contents, tool arguments or results, or complete workspace paths. Recent entries are bounded to 128 sessions and expire after 24 hours; local files and backups remain on your device until removed.

Disabling Agent Pulse stops its visual surface but does not uninstall its hooks. To stop new signal collection, remove the hooks using the plugin's setup command before removing its local data. See the Agent Pulse setup guide.

Spotify Lyrics: the plugin reads playback metadata from Spotify Desktop through macOS Automation. Lyric lookups send track and artist information, and where needed album and duration, to LRCLIB or NetEase. Artwork may be fetched from the URL supplied with playback metadata. These services receive your network request information. No additional Spotify login is collected by Island.

Third-party plugins may have different practices. Review their source, permissions, and privacy information before installation. Their processing is outside this policy unless Brighteng provides the plugin.

Sharing and international processing

We share information only as needed with hosting, email, payment, and related service providers to operate the site, deliver purchases, and provide support; with professional advisers where necessary; or when required by law or to resolve a legal claim. We do not sell personal information.

Brighteng operates in China, and our service providers may process information in other countries. Where applicable law requires safeguards for a transfer, those requirements apply. Contact us for information about the providers relevant to your request.

Retention and security

We retain support and purchase records for as long as needed to deliver and support the purchase, address disputes or fraud, and satisfy applicable legal recordkeeping requirements. We review deletion requests against those needs rather than retaining information for unrelated marketing. Creem and Cloudflare determine retention for their own processing under their policies.

We restrict access to customer information to people and providers who need it for these purposes. HTTPS protects traffic to this site and checkout. No storage or transmission method can be guaranteed completely secure.

Your choices and rights

Depending on the law that applies to you, you may request access, correction, deletion, a copy of your information, restriction of processing, or object to certain uses. Where processing is based on consent, you can withdraw it. Contact kevin@brighteng.org; we may need to confirm your identity without collecting unnecessary information.

We may need to retain some purchase records for legal reasons and will explain relevant limits. For information held by Creem as merchant of record, you can also contact Creem directly. You may complain to the data-protection authority that has jurisdiction over your circumstances.

Children and policy updates

Island purchases are intended for people able to enter a purchase contract, or with the permission of a parent or guardian. We do not knowingly collect children's personal information for marketing. Contact us if a child has provided personal information that should be removed.

Changes will be published here with a new effective date. We will give additional notice where legally required for a material change.