Privacy

Last updated 19 October 2026

BrandThrough is run by UntilNow in Australia. This page explains what we collect when you browse the site, create an account or send us a form, what we do with it, and how to have it removed. Questions go to team@untilnow.com.au.

Browsing

You can browse without an account. We don’t run advertising, and we don’t load analytics unless you allow them in the cookie banner. Our host keeps standard server logs (such as IP address and browser) to run and protect the site.

Your account

A free account opens the whole library. When you create one we keep:

  • your name and email address
  • your password, stored only as a secure hash, if you sign up with email. We never see or store the password itself
  • if you continue with Google, the name, email address and profile picture Google shares with us. We don’t get access to anything else in your Google account
  • whether you’ve confirmed your email, your plan, and when you joined
  • while you’re signed in, a session record with the IP address and browser it was started from, so we can keep you signed in and spot misuse

We use this to sign you in, show you the full library, and send the emails an account needs: confirming your address and resetting your password. We don’t send marketing email, and we never sell or rent your details.

Forms

When you submit a project or ask about sponsoring, we keep the name, email address and details you enter, to review your request and reply to you.

Cookies

  • A sign-in cookie keeps you signed in. It’s removed when you sign out.
  • A consent cookie remembers your choice in the cookie banner, for a year.

We don’t use advertising or cross-site tracking cookies.

Who handles your data

We use a few services to run BrandThrough. Each only gets what it needs:

  • Vercel hosts the site
  • Supabase stores the database, including accounts
  • Resend sends account emails
  • Google handles “Continue with Google” sign-in

Some of these services store data outside Australia, including in the United States.

Keeping and deleting your data

We keep your account until you delete it. You can do that any time from your account page: it removes your account, your sessions and your sign-in details straight away. Form messages are kept as long as we need them to handle your request.

To see, correct or remove anything else we hold about you, email team@untilnow.com.au.

Changes

If this changes, we’ll update this page and the date at the top. If a change is significant, we’ll let account holders know by email.