Privacy Policy

This Privacy Policy explains what information SpinCounts collects, how we use it, and the choices you have. By using the Service you agree to the practices described here.

1. Information We Collect

Account information you provide

• Name, email address, password (stored hashed) when you sign up
• Role-specific profile data: stage name, hometown, primary genre, streaming and social profile URLs, contact emails — depending on whether you sign up as an Artist or Station Owner
• Country

Payment information

If you subscribe to a paid plan, our payment processor Stripe, Inc. collects and stores your payment card details directly. SpinCounts does not see or store full card numbers. We receive only the last 4 digits, card brand, expiration, and a charge ID from Stripe.

Usage data

• Pages visited, features used, timestamps
• Reports you generate (track, date range, station list)
• IP address, browser type, device type (from server logs)
• Plays in our players (on our website and on stations' websites): which station's Play button was pressed and whether its stream then started or failed, kept as daily totals per station (not linked to you or your account; see "Audio ads and measurement" below for the short-lived scrambled code these counts also use)

Audio ads and measurement

When you press Play in a SpinCounts player — on our website or on another website that uses our player — a short audio ad may play before the station starts. This is how that works:

• How ads are chosen — which ad plays is decided by our ad schedule and, where an ad is aimed at certain kinds of stations, by facts about the station you picked (such as its genre, language, or country) — not by information about you. Whether an ad plays at all also depends on how recently one played on your internet connection and, if you are signed in on our website, on whether you own that station (owners do not get ads before their own station). We do not build listener profiles or target ads by your location, and our audio ads do not use outside ad networks or ad-tracking code.
• What we count — when a page with a Play button loads, or you come back to it, your browser asks spincounts.com whether an ad is ready for that station. When you press Play it sends small signals: that Play was pressed, when an ad starts, finishes, fails, or is closed early (with how much of it played), whether the station's stream then started or failed, and, if an ad ever shows a link, whether it was tapped. These signals carry the station, the ad, and a one-time play code, not your name, account, or a device ID. If you are signed in, your usual sign-in cookie is sent with them; we use it only to keep station owners' and our staff's own plays apart, and we do not record who you are with any play.
• Limiting how often ads play and blocking abuse — for each Play press and ad request, our server turns your internet address into a scrambled code using a secret key and the date, so the code is different every day. One code covers your connection (for the gap between ads), another the wider network block it belongs to (for abuse limits). We do not store your internet address in these records, and we delete the codes within a few hours (no more than about a day if we set a longer gap between ads).
• What we keep — daily totals per station, per ad, and per player (our website or a station's website), and, for each ad that starts, a short record: which ad, which station, which player, when it started, whether it finished, was closed early, or failed, and whether the station then started. These records contain no code for your device, network, or account.
• Station switches — if you switch SpinCounts ads off (or back on) for your station from your station dashboard, we record which account did it and when.
• No ad cookies — ads do not set cookies or save anything in your browser.

Like every request to our site, these signals also appear in our ordinary server logs (see Data Retention).

Content you submit

Anything you enter into editable fields (track titles, artist images, etc.).

Information from third parties

We enrich public catalog data using third-party APIs (Apple Music, Deezer, Spotify, YouTube, Last.fm). We do not receive personal data about you from these providers; we receive metadata about songs, artists, and albums.

2. How We Use Information

• Provide and operate the Service (run reports, deliver charts, charge subscriptions)
• Play short audio ads before station streams in our player, and count them as totals for reporting and billing
• Send transactional emails — welcome message, password resets, receipts, service notices
• Communicate about your account, support requests, and product updates
• Improve and secure the Service (debug errors, monitor for abuse)
• Comply with legal obligations and enforce our Terms

3. Legal Bases (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, our lawful bases for processing are:

• Contract — to provide the Service you signed up for
• Legitimate interests — to secure, improve, and market the Service, and to run and count audio ads in our player as described above, in a way that does not override your rights
• Consent — for marketing emails and any optional cookies (you can withdraw at any time)
• Legal obligation — to retain billing records, respond to lawful requests, and meet tax requirements

4. How We Share Information

We do not sell your personal information. We share it only with:

• Service providers who help us run the Service:
  • Stripe (payment processing) — privacy
  • SiteGround (hosting) — privacy
  • Email delivery providers (transactional mail)
• Legal & safety — if required to comply with the law, enforce our Terms, or protect rights, property, or safety
• Business transfers — in connection with a merger, acquisition, or asset sale, where the successor agrees to honor this Policy

We do not share or sell personal data for cross-context behavioral advertising. Advertisers whose audio ads play in SpinCounts players receive totals only (for example, plays per station, genre, and day); we do not give advertisers personal information about you or any other listener.

When you press Play, your device connects directly to the station's stream (or the streaming service the station uses). Like any website you visit, that server receives your internet address, and the station's or service's own privacy policy applies to that connection.

5. Cookies & Local Storage

We use a small number of cookies and browser-storage entries to make the Service work. See our Cookie Notice for the full list.

6. Data Retention

• Account data — kept while your account is active, then deleted within 90 days of account closure (longer if required for legal or billing purposes)
• Billing records — retained for 7 years for tax and accounting
• Server logs — typically rotated within 30 days
• Generated reports — retained while your account is active; saved-report PDFs deleted on request
• Scrambled codes from Play presses and ad requests, used to limit ads and block abuse (not your internet address) — normally deleted within a few hours, kept at most about a day
• Records of individual ad plays (no code for your device, network, or account) — kept 90 days, to check delivery and settle questions with advertisers
• Daily play and ad totals per station and per ad — kept long-term for reporting and billing; they contain no personal information

7. Your Rights

All users

• Access — request a copy of the personal data we hold about you
• Correction — update incorrect information from your dashboard or by emailing us
• Deletion — request deletion of your account and associated data
• Opt-out — unsubscribe from non-transactional emails using the link at the bottom of each message

EEA / UK residents (GDPR)

You have additional rights to restrict or object to processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority.

California residents (CCPA / CPRA)

You have the right to know what categories of personal information we have collected, to delete that information, to correct inaccurate information, and to opt out of sale or sharing for cross-context behavioral advertising (we do not engage in such activities). We do not discriminate against users who exercise their privacy rights.

To exercise any right, email support@spincounts.com. We may need to verify your identity before responding.

8. Security

We use industry-standard measures including HTTPS, password hashing, server-side access controls, and isolated database storage. No system is fully secure; we cannot guarantee absolute protection. If we discover a breach affecting your data, we will notify you and applicable authorities as required by law.

9. International Data Transfers

SpinCounts is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and stored in the U.S. Where applicable, transfers from the EEA or UK are made under Standard Contractual Clauses or another approved mechanism.

10. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

11. Changes to This Policy

We will update the Effective Date at the top when we make changes. Material updates will be announced via email or an in-app notice at least 14 days before they take effect.

12. Contact

Privacy questions or requests: support@spincounts.com. Or visit our Contact page.