Privacy policy

Last updated November 1, 2026. Draft — pending legal review.

Captunes (“we”) runs captunes.com, a site with music charts, insights, an artist directory and promotion tools for independent artists. This policy explains what personal data we process and why.

What we collect

Account data — email address, display name and a password hash (we never store your password) when you create an account.
Artist profile data — what you add to a profile or release: bio, images, links, and the evidence you submit when claiming a profile.
Newsletter — your email address and when you confirmed or unsubscribed.
Payments — handled by Stripe. We receive the order status and amount, never your card number.
Usage data — aggregated daily counts of link clicks per release (no per-person click log), and security logs (IP address, user agent) kept briefly to prevent abuse. If analytics is enabled we use Google Analytics 4 to measure page views.

Why we use it

To run your account and sessions (contract).
To verify artist claims and moderate content (legitimate interest in a trustworthy directory).
To send the newsletter you asked for (consent; unsubscribe any time from any email).
To process promotion orders and keep accounting records (contract, legal obligation).
To keep the service secure, including rate limiting and bot protection with Cloudflare Turnstile.

Cookies

We set one essential cookie, __session, only when you sign in. It is HttpOnly and expires after 30 days. Analytics cookies are set only if analytics is enabled.

Who processes data for us

Cloudflare (hosting, database, bot protection), Stripe (payments), our email provider (transactional and newsletter email), and Google (analytics, if enabled). Chart data is public data from Apple Music; Spotify links come from Spotify’s public API.

Retention

Sessions expire after 30 days; one-time email tokens within a week of expiry; aggregated click statistics after 25 months. Account data is kept until you delete your account. Order records are kept as long as tax law requires.

Your rights

You can access, correct, export or delete your data, and object to processing. Email privacy@captunes.com. You may also complain to your data protection authority.

Changes

We will post changes here and, for material ones, email account holders.