What we collect, and why.

You can browse the site and play every public song without giving us anything. No account, no email, nothing typed in.

We do record anonymous play events — which song was played, and when — so the site can show what’s being listened to. If you’re not signed in, that record isn’t linked to you or to any identifier we can trace back to a person.

We store your email address and which form you used, so we can tell you when there’s a new release. That’s all — no name, no profiling, and we never pass it to anyone else.

Every email we send has a one-click unsubscribe link, and it works permanently. You can also just ask us to remove you.

We store your email address, the name you choose to give (optional), and your password — hashed with scrypt, which means we cannot read it and could not tell you what it is. We also store a session record so you stay signed in; the cookie holding it is HttpOnly and, in production, sent only over HTTPS.

Anything you choose to post as a member — wall messages, questions for the band, liner notes, poll and mix votes, playlist items, songs you’ve found — is stored against your account. Public-facing parts show the name you gave, never your email address.

Payments are handled entirely by Stripe. Your card details are typed on Stripe’s own checkout page and are never sent to, seen by, or stored on this site.

What we do keep is the order record Stripe sends back: what you bought, the amount, and the name, email, phone and shipping address needed to post it to you. We keep those for as long as we may need them for the order and our tax records.

We use Google Analytics to see roughly how many people visit and which pages they read. It sets cookies, so we ask first — it loads only if you choose “Allow” on the banner, and declining leaves the site working exactly the same. We don’t use it to identify individuals, and we don’t run advertising or retargeting.

If you’d rather not be counted, browser “do not track” settings, private browsing, and standard content blockers all prevent it.

Anonymous play events are pruned after about 180 days. Wishes left for future records are pruned after about a year. Mailing-list entries, accounts and orders are kept until you ask us to remove them — or, for orders, as long as we’re required to keep financial records.

Ask, and we’ll do it. You can contact us to get a copy of what we hold about you, correct it, or delete your account and everything attached to it. Members can also delete their own account outright from the account page — that removes your login, your playlist, anything you posted, and your address from our mailing list, and strips your name from any wishes or pledges left behind.

A short list, and we use each only for the job named: Stripe (payments), Resend (sending email), Google Analytics (visitor counts), DigitalOcean (hosting and the database), and Cloudflare (serving the site). We don’t sell or share your information with anybody else.

The site is served over HTTPS, passwords are hashed and never stored in a readable form, session tokens are stored only as a one-way hash, and admin and member areas are access-controlled. No system is perfect — if you find a problem, please tell us and we’ll fix it.

Questions about any of this go to our contact page. If you’re in Australia and unhappy with how we’ve handled your information, you can also raise it with the Office of the Australian Information Commissioner.