What this site knows about you.

If you only listen

You do not need to give anything to use this site. There is no account, no sign-in, and nothing to agree to before the music plays. Visiting still leaves traces, and these are they:

• Which pages you opened, when, and which site sent you here if any.
• An approximate location — usually the city — worked out from your IP address.
• Your browser, operating system, screen size, language preference and time zone.
• Which company operates the network you connected from. That is worked out on our own server from a database we host, so nothing about you is sent anywhere to do it.
• Which tracks you played, skipped or unmuted, and which streaming links you clicked.

None of that identifies you by name, and none of it is combined with anything bought from a data broker, because nothing is bought from a data broker.

If you join the mailing list

The list is the one place personal information is kept on purpose. Canadian anti-spam law puts the burden of proving consent on the sender, so subscribing records and keeps:

• Your email address.
• The IP address you signed up from, and the one you confirmed from.
• When each of those happened.
• The exact sentence you were shown when you agreed — currently “An email when there is a new record to put on. Nothing else, and not often.” — so a later rewording cannot change what you actually consented to.
• Whether the address passed a deliverability check, so a dead address is not mailed repeatedly.

Nothing is sent to you until you click the link in the confirmation email. If you never click it, the request expires after a week and the address is never mailed.

The IP addresses are there for one reason: they are the evidence that a real person, at a real moment, asked for this. They are not used to follow you around the site.

Session recordings

Some visits are recorded as a visual playback — what the page looked like, where you scrolled, what you clicked. It is how a broken layout or a hero that fails to load gets found without waiting for somebody to report it.

These recordings are not masked. Page text and form fields appear as they were, which means an address typed into the newsletter box shows up in the playback — including if you type one and then decide not to subscribe. It is the same address the rest of this page describes, and the recordings are stored on a server we run ourselves rather than with a third-party vendor, but it is worth knowing rather than discovering.

Who else sees any of this

Only the services that make the site work. Every one of them, and what it gets:

• Rybbit — page views and the events above. Sets no cookies. Once you confirm a subscription your address is attached, so a visit can be matched to a subscriber.
• Google Analytics — page views. This is the only thing on the site that sets cookies.
• Sentry — errors, performance traces and the session recordings above, plus your address once you have confirmed. Self-hosted, so this stays on our own server rather than going to a vendor.
• Reoon — receives an address once, at signup, to check it can receive mail. Nothing else is sent.
• EmailIt — sends the confirmation email and holds confirmed addresses so a newsletter can be sent. Only confirmed addresses ever reach it.
• MaxMind — not a recipient. Their database is downloaded to our server and queried there, so no visitor data is sent to them.

That is the whole list. Nobody pays to be on it, and nothing is shared for advertising, profiling or resale.

What is stored on your device

• Google Analytics sets cookies to recognise a returning browser.
• If you confirm a subscription, your address is kept in your browser so later visits from that device can be matched to it.
• A note of your network operator is kept for the length of the browsing session, so it is not looked up on every page.

Clearing your browser’s site data removes all of it. The site works normally without any of it — a browser that blocks storage entirely loses nothing but the analytics.

How long any of it is kept

• Analytics, errors and recordings: up to 90 days, then they age out.
• Mailing list records: kept while you are subscribed, and kept after you unsubscribe. Proof that somebody asked to leave, and when, matters as much as proof they joined — and a deleted record is one a future import could put back on the list.
• Unconfirmed signups: the link expires after a week and the record is never mailed.

What you can do about it

• Every marketing email carries an unsubscribe link, and it never expires.
• You can ask for a copy of what is held about you, or ask for it to be deleted, by writing to the address below.
• Your browser can block the analytics entirely, and the site is built to work when it is blocked.

For anything else — a question, a correction, or a removal request — [email protected]. A real person reads it.

Changes

If what is collected changes, this page changes with it, and the date at the top moves. There is no version that quietly says “we may update this from time to time” and leaves it at that.