Privacy Policy

1. Introduction

Welcome to SideTrack ("we," "our," "us," or "the Rebels"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our music library management service (the "Service"). We are committed to protecting your privacy with the same dedication that Samwise Gamgee showed to Frodo Baggins.

"With great data comes great responsibility." — Uncle Ben, probably, if he worked in tech

2. Information We Collect

2.1 Information You Provide Directly

When you register for an account or use our Service, we may collect:

• Account Information: Your email address, display name, and authentication credentials (encrypted, obviously — we're not monsters)
• Profile Information: Any additional information you choose to provide, such as your favorite music genres or whether you prefer tabs over spaces
• Music Library Data: Information about your Suno music library, including song metadata, playlists, favorites, and listening preferences
• Communications: Any messages you send us, including support requests and feedback (even the angry ones)

2.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Device Information: Browser type, operating system, device identifiers (we promise not to judge your browser choice... much)
• Usage Data: Pages visited, features used, time spent on the Service, and general interaction patterns
• Log Data: IP addresses, access times, and referring URLs
• Cookies: Small text files stored on your device (the digital kind, not chocolate chip — sadly)

We collect less data than the NSA but more than your local coffee shop's loyalty card.

2.3 Information from Third Parties

If you authenticate via Google or Microsoft OAuth, we receive:

• Your email address
• Your display name
• Your profile picture URL (if available)

We do NOT receive your password. That's between you and your password manager (you do use one, right?).

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service (obviously)
• Authenticate your identity and manage your account
• Sync and manage your music library across sessions
• Respond to your inquiries and provide customer support
• Send you service-related notifications (sparingly, like a good DM)
• Detect, prevent, and address technical issues and security threats
• Analyze usage patterns to improve user experience
• Comply with legal obligations (the boring but necessary stuff)

We will never use your data to train a rogue AI that takes over the world. Pinky promise.

4. Data Sharing and Disclosure

We do NOT sell your personal information. Ever. We're not those kinds of people.

We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share specific information
• Service Providers: With trusted third parties who assist in operating our Service (under strict confidentiality agreements that would make a Maester proud)
• Legal Requirements: When required by law, subpoena, or other legal process (we'll resist like the Rebellion, but sometimes the Empire has paperwork)
• Safety: To protect the rights, safety, or property of our users or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you'll be notified if this happens)

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS 1.3) and at rest
• Secure password hashing (bcrypt with proper salt — the cryptographic kind)
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• A small army of security-minded developers who drink too much coffee

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data like it's the One Ring, we cannot guarantee absolute security. But unlike Isildur, we actually try to do the right thing.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Upon account deletion, we will remove or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes.

Unlike your browser history, we actually delete things when you ask us to.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data (in a human-readable format, not ancient Klingon)
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data ("Right to be Forgotten" — like a good rm -rf but for privacy)
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for the Service to function (authentication, session management)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the Service

You can control cookie preferences through your browser settings. However, disabling essential cookies may cause the Service to malfunction, like a droid with a bad motivator.

9. Children's Privacy

The Service is not intended for users under the age of 13 (or applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it faster than you can say "CTRL+Z."

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and other mechanisms recognized under applicable law. Your data is treated with respect regardless of which server cluster it calls home.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically, though we promise to make it less boring than most privacy policies.

Changelog: v1.0 - Initial release. No bugs found. (Famous last words.)

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or just want to chat about the ethical implications of data collection in a post-digital society, you can reach us at:

• Email: [email protected]
• Carrier Pigeon: Not supported (latency issues)
• Telepathy: Still in beta