Privacy Policy.

1. Who we are

Dropkick.fm is run by Murfin Ltd, a company registered in the United Kingdom. We are the controller of the personal data described here. Contact us at hello@dropkick.fm.

2. What we collect

• Account: your email address and, if you add one, a display name.
• Artist profiles: the name, bio, location, genres, images, links and track links you give us, or ask us to import from your public SoundCloud or Bandcamp page.
• Activity: your upvotes (shown to you in My Upvotes), the artists you subscribe to, and reports you send.
• Technical: a keyed one-way hash of your IP address (never the address itself), used to stop abuse and fake upvotes.
• Payments: if you buy a promotion, Stripe processes your card. We only receive the payment status and amount, never your card details.

3. Why we use it

• To run your account and the service (sign-in, upvotes, artist profiles, charts): necessary to provide what you asked for.
• To keep charts fair and the site safe (rate limits, spotting fake upvotes, moderation): our legitimate interest in a trustworthy service.
• To send service emails (sign-in links, review decisions, launch reminders): necessary to provide the service.
• To measure our advertising (Meta Pixel): only with your consent, which you can withdraw at any time.
• To meet legal obligations, such as keeping payment records.

4. Artist email subscriptions

When you subscribe to an artist and confirm by email, that artist (and only that artist) can see and download your email address to tell you about their music. From then on they are responsible for how they use it. We keep a record of when and where you agreed and the exact wording. You can unsubscribe from any artist at any time using the link in their emails or from your account page.

5. Cookies and analytics

• Essential cookies keep you signed in (dk_session, 30 days), carry an unfinished artist sign-up (dk_draft), and remember your cookie choice (dk_consent, 12 months). These are always on.
• Umami Analytics counts page views without cookies and without identifying you.
• Meta Pixel and Conversions API (Meta Platforms Ireland) help us see whether our adverts on Facebook and Instagram lead to sign-ups. They only run if you choose Accept in the cookie banner. When they do, Meta sets cookies (_fbp, _fbc) and we send Meta events such as page views and sign-ups along with your IP address, browser details and, for sign-ups, a hashed copy of your email address.

You can change your choice at any time: Cookie settings.

6. Who we share it with

We use these providers to run Dropkick. They process data on our instructions:

• Vercel (hosting and image storage)
• Supabase (database, hosted in the EU)
• Resend (email delivery)
• Stripe (payments for promotions)
• Apify (reading public profile pages you ask us to import)
• Umami (cookieless analytics)
• Meta (advertising measurement, only with your consent)

Embedded players are provided by SoundCloud and Bandcamp, who apply their own privacy policies when you press play. We may also disclose data if the law requires it, or to protect people from harm.

7. Where it is stored

Our database is in the EU. Some providers (for example Vercel, Resend and Meta) may process data in the United States. Where they do, the transfer is protected by the UK International Data Transfer Addendum, the EU Standard Contractual Clauses or the UK-US data bridge.

8. How long we keep it

• Account and artist data: until you delete your account or ask us to, then within 30 days.
• Sign-in links: 20 minutes. Unfinished sign-ups: a few days.
• Abuse-prevention records: up to 90 days.
• Payment records: six years, as required by UK tax law.

9. Your rights

Under UK and EU data protection law you can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time. Email hello@dropkick.fm and we'll reply within a month. You can delete your listener account yourself from your account page. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

10. Changes and contact

We'll update this page when our practices change and tell you by email about anything significant. Questions: hello@dropkick.fm. You can also read our Terms of Service.