PrivacyDirective

01//Scope

This directive covers harm.icu and every page served from it. It does not cover any site you reach by following a link away from it.

02//What we collect

Anonymous visit statistics (section 04), and your email address only if you enlist (section 03). There are no accounts, no tracking pixels, no advertising tags and no fingerprinting.

The site keeps a single value, harm:booted, in your browser's session storage so the intro sequence plays a shorter cut on repeat visits in the same tab. It never leaves your device, it is not a cookie, and it is erased when the tab closes.

03//Transmissions (newsletter)

If you enter your email address in the ENLIST form and press ENLIST, you consent to receive emails from harm.icu: news, releases, drops and pre-orders. That is the only thing the address is used for.

The address is stored in the harm.icu customer list on Shopify, which runs the store at store.harm.icu and sends the emails on our behalf. It is marked as subscribed and tagged "newsletter". If you have already ordered from the store, your existing customer record is updated instead of a new one being created. We do not sell, rent or share it.

Every email has an unsubscribe link, and you can ask us to delete your address at any time (section 10). We keep it until you unsubscribe or ask for deletion. When you submit the form, your IP address is held briefly in memory to stop abuse and is never stored.

04//Analytics

harm.icu uses Vercel Web Analytics, which sets no cookies and uses no cross-site identifiers. It records aggregate, anonymous statistics: which pages are viewed, the site that referred the visit, and approximate country, device type, browser and operating system. It also counts which outbound links are clicked (for example, that someone opened Spotify from the music page) and that a newsletter signup succeeded, never the address itself. Visits are grouped using a hash of request data that resets every day, so no visitor can be identified or followed over time. See Vercel Web Analytics privacy (opens in a new tab).

05//Hosting and server logs

The site is hosted on Vercel. Like any web host, Vercel processes standard technical request data (IP address, browser user agent, requested URL and time) to deliver pages and defend against abuse. We do not use this data to identify anyone. See Vercel's privacy policy (opens in a new tab).

06//Fonts and assets

Every font, image and script is served from harm.icu itself. Loading the site makes no requests to third-party font or asset services.

07//External destinations

Links on this site lead to third parties that run their own services under their own privacy policies:

• store.harm.icu (the harm.icu store, run on Shopify under its own privacy policy and cookie notice)
• waxvessel.com (label and vinyl pressing)
• Spotify, Apple Music, YouTube and YouTube Music, Amazon Music, Bandcamp (streaming)
• Facebook, Instagram, X, TikTok, YouTube (social)
• hordeman.co (site credit)

External links open in a new tab. Once you leave harm.icu, this directive no longer applies.

08//Cookies and consent

harm.icu sets no cookies, so there is no consent banner. If a cookie-setting tool is ever added, a consent prompt will appear and nothing will load until you accept it.

09//Your rights

If you have enlisted, you can ask to access, correct, export or delete your email address, and you can withdraw consent at any time by unsubscribing. Rights you hold under laws such as the GDPR, UK GDPR or CCPA are unaffected. Raise any request through the contact channel below.

10//Contact

Reach harm.icu through its official channels, for example @harm.icu on Instagram (opens in a new tab).

11//Changes

Any change to this directive is published on this page with a new effective date.