Legal
Privacy Policy
Last updated: 2026-05-15
1. Who we are
We Are Down Right (wearedownright.com) is operated by Nonagon Design LLC. Contact us at get@johnmckenna.io.
2. United States only
This service is intended for residents of the United States. If you are located outside the United States, you should not be using this site. Your data is stored and processed in the United States.
3. Information we collect
Account information. Your email address and display name, which you provide at sign-up. Authentication is handled by Stytch, our auth provider, which holds your password and session credentials on our behalf.
Content you create. Shows and venues you add, RSVPs, comments on shows and venues, venue ratings, friendships, crews you join or create, and invitations you send.
Technical information. Session cookies set by Stytch for authentication. Server logs (IP address, timestamps, request paths) retained briefly for security and debugging.
We do not use third-party analytics or advertising trackers.
4. How we use it
To run the service, authenticate you, prevent abuse, and communicate with you about your account (for example, password resets sent via Stytch).
5. Sharing
We don't sell your personal information. We share information with service providers only as needed to run the service — Stytch for authentication, and our hosting provider. We may disclose information if required by law.
6. Your California rights (CCPA / CPRA)
California residents have rights under the CCPA and CPRA. We extend these to all US users as our baseline. You have the right to:
- Know what personal information we collect and why
- Access a copy of your information
- Delete your information (subject to limited retention required by law)
- Correct inaccurate information
- Limit the use of sensitive personal information — we don't collect any beyond authentication credentials, which Stytch holds
- Not be discriminated against for exercising any of these rights
We do not "sell" or "share" personal information as those terms are defined under California law.
To exercise any of these rights, email get@johnmckenna.io from the email address on your account.
7. Retention
We keep your information while your account is active. When your account is deleted, your personal records are removed. Server logs rotate after a short period.
8. Children
This service is not directed to children under 13, and we don't knowingly collect information from anyone under 13.
9. Security
We use standard security measures — HTTPS, Stytch-managed authentication credentials, scoped database access. No system is perfectly secure.
10. Changes
We may update this policy. Material changes will be posted on this page.
11. Contact
Questions about this policy or your data? Email get@johnmckenna.io.
Nonagon Design LLC