Privacy Policy
Last updated: August 15, 2026
This policy explains what personal data Jamtrackers collects, why, and what rights you have over it.
Who is responsible for your data
The data controller is Parker Siddall, an independent sole proprietor based in California, United States.
Contact for any privacy question or request: jamtrackers@gmail.com
What we collect
Account data — your email address (which also serves as your username), an encrypted form of your password, and your account verification status. We never store your password in readable form.
Profile data— anything you choose to add: a profile photo, a cover photo, a short bio, and, if you’re a creator, a donations link.
Activity data — the tracks, tools, blogs, and courses you favourite, and the users you follow.
Content you upload — any audio files you add to the Service.
Technical data— IP address, browser type, device information, and pages visited, collected through our hosting providers’ standard logs and through analytics.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, authenticating you | Performance of a contract |
| Sending account emails — verification, password resets | Performance of a contract |
| Keeping your favourites and follows | Performance of a contract |
| Protecting the Service against abuse and spam | Legitimate interests |
| Understanding how the Service is used, via analytics | Consent |
| Complying with legal obligations | Legal obligation |
We don’t sell your personal data, and we don’t use it for advertising profiling.
Who we share it with
We use third-party providers to run the Service. Each processes data only as needed to provide their service:
| Provider | Purpose |
|---|---|
| Heroku (Salesforce) | Application and database hosting |
| Netlify | Frontend hosting |
| Amazon Web Services (S3) | Storage of uploaded images and audio |
| Amazon Web Services (SES) | Sending account emails |
| Google reCAPTCHA | Preventing automated sign-up abuse |
| Google Analytics | Usage analytics (only with your consent) |
| YouTube (Google) | Embedded video playback |
We may also disclose data where legally required.
International transfers
Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, transfers rely on appropriate safeguards — typically the European Commission’s Standard Contractual Clauses, or an adequacy decision such as the EU–US Data Privacy Framework.
How long we keep it
Account and profile data is kept while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must retain something to meet a legal obligation.
Server logs are retained for a short period by our hosting providers as part of their standard operation. Analytics data is retained according to the retention period configured in Google Analytics.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- rectify anything inaccurate;
- eraseyour data (“right to be forgotten”);
- restrict how we process it;
- port your data to another service in a machine-readable format;
- object to processing based on legitimate interests;
- withdraw consent at any time, where processing is based on consent — including analytics cookies.
To exercise any of these, email jamtrackers@gmail.com. We’ll respond within one month.
If you think we’ve handled your data improperly, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence within the EU or EEA.
Security
Passwords are stored hashed, never in plain text. Authentication uses short-lived tokens held in httpOnly cookies, which JavaScript on the page cannot read. Traffic is encrypted in transit over HTTPS.
No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
Children
Jamtrackers isn’t intended for children under 16, and we don’t knowingly collect their data. If you believe a child has given us personal data, contact us and we’ll delete it.
Changes
We may update this policy. Material changes will be announced through the Service, and the “last updated” date above will always reflect the current version.