Effective August 8, 2026

Privacy

Fortitude Audio collects only the information needed to operate the product waitlist and defend its form from automated abuse. The website does not receive or upload audio from the Mac application.

Waitlist information

When you submit the form, we store your normalized email address, creation time, source, form location, and a waiting status in Google Firebase Firestore. We also store first-touch campaign attribution: the landing and signup page paths, the referring website’s hostname, and any UTM source, medium, campaign, term, or content values in the link. We do not store the referring page’s full URL or query string. The document identifier is a SHA-256 hash of the normalized address. Submitting an address already on the list does not change its existing record or original attribution, and the public response does not reveal whether the address was already stored.

Abuse prevention

Cloudflare Turnstile evaluates limited request and browser data to distinguish people from automated submissions. Fortitude also keeps short-lived rate-limit counters for a verified session, a keyed hash of the request IP address, and global traffic windows. Raw IP addresses are not stored in the waitlist database.

Cookies

After a successful waitlist security challenge, Fortitude sets a secure, HTTP-only, same-site cookie for up to 12 hours. It remembers only that the browser completed the form check and binds the signed value to the browser’s user-agent digest.

Website analytics

Cloudflare Web Analytics provides aggregate page views, visits, traffic-source domains, device and browser categories, country-level location, and page-performance measurements. Its beacon does not use cookies, local storage, fingerprinting, or persistent visitor identifiers, and it does not record waitlist email addresses or audio.

Retention and access

Rate-limit records expire automatically after their enforcement window, no later than 12 hours. Waitlist records are kept while Fortitude Audio is preparing beta and release communications, or until the address is removed in response to an unsubscribe or privacy request. Firestore is not exposed to browser clients; only the site’s restricted server function can access the collection.

Service providers

Netlify hosts the website and its server function, Google Firebase stores waitlist records, and Cloudflare provides form abuse protection through Turnstile and aggregate traffic measurement through Web Analytics. Each provider processes data under its own terms and privacy commitments.

Your choices

You can unsubscribe through any waitlist email. A dedicated privacy contact will be published before the first public mailing; until then, no marketing email is sent from this site.