RecordBag Privacy Policy

We collect personal data about account holders, visitors, creators, listeners, moderators, people who message us, and people who interact with playlists, mixes, ads, and discovery features on RecordBag.

Some data is provided directly by you. Some is generated by how you use the service. Some is inferred from device, browser, and approximate location signals needed to secure, personalize, and operate the platform.

The data we may collect includes account details such as email address, display name, password credentials handled through our auth systems, avatar, profile biography, and social links.

We also process service data such as playlists, mixes, track associations, likes, saves, follows, messages, reports, recommendation feedback, ad interactions, creator statistics, and timestamps showing when actions took place.

We may process technical and approximate location data such as IP-derived country or city, device and browser information, session identifiers, referrers, usage logs, and profile-based geography settings used by Atlas and related discovery or ad-targeting features.

We use personal data to provide the service, authenticate users, display profiles, power playlists and mixes, personalize discovery, support recommendations and Explore mode, protect the service against abuse, moderate content, support analytics, measure ad performance, and communicate with users.

We also use data to improve features, diagnose faults, understand product usage, enforce platform rules, investigate complaints, comply with legal obligations, and defend legal claims where necessary.

Where UK GDPR or similar laws apply, we rely on lawful bases that fit the relevant processing. Those may include performance of a contract when we provide your account and core service features, legitimate interests when we secure and improve the platform or measure product and ad performance, consent where it is required, and legal obligation where we must retain or disclose information.

Where we rely on legitimate interests, we aim to keep the processing proportionate and limited to what is reasonably necessary for operating, securing, and developing RecordBag.

RecordBag includes advertising placements. We may record ad impressions, clicks, slot positions, page paths, referrers, device types, session identifiers, and approximate country or city information to measure campaign performance, frequency, and delivery quality.

We may use approximate geolocation from IP address headers, IP lookups, or user profile location settings to support Atlas features, local discovery, geo-restricted ads, and campaign scheduling. We do not describe this as precise GPS tracking unless and until we actually collect precise location data.

RecordBag uses cookies and similar technologies for session management, login state, security, player and interface preferences, ad frequency controls, and analytics-related functions. Some cookies are strictly necessary for the service to work.

Where non-essential cookies or similar technologies are used, they should be managed in line with applicable consent requirements. You can also control cookies through your browser settings, although blocking some cookies may affect the service.

We may share personal data with hosting, infrastructure, storage, authentication, moderation, analytics, email, security, and service providers who help us run RecordBag. We may also share data where required by law, to respond to valid legal process, or to protect rights, safety, and the integrity of the platform.

Some profile information, playlists, mixes, and creator statistics are public by design when you choose to publish them. Private playlists and account-restricted data are handled differently, but moderators and administrators may still access relevant data when needed for support, abuse prevention, moderation, or legal compliance.

We keep personal data for as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining security, handling moderation and disputes, meeting legal obligations, and keeping appropriate business records.

Retention periods may vary by data type. We may delete, anonymize, or aggregate data when it is no longer needed, subject to legal or operational reasons to keep it longer.

Depending on where you are located, you may have rights to be informed, access your personal data, correct inaccurate data, erase data, restrict processing, object to certain processing, withdraw consent where consent is the basis, and request portability of certain data.

If you make a valid request, we will assess it and respond in line with applicable law. Some rights are subject to exceptions, for example where we must keep certain data for security, legal, accounting, moderation, or claims-handling reasons.

Where personal data is processed across borders, we aim to use appropriate safeguards and security controls suitable for the nature of the service. No internet platform can promise absolute security, but we take reasonable technical and organisational steps to reduce risk.

If you are unhappy with how we handle your data, contact us first by email us so we can try to resolve it. If you remain dissatisfied and you are in the UK, you may also complain to the Information Commissioner's Office.

We may update this Privacy Policy as RecordBag evolves. When changes are material, we may update the date above and provide an in-product notice where appropriate.