CCPA Notice

Updated November 1, 2026

About this notice

This notice adds to our Privacy Policy for California residents and describes rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). We offer these rights to California residents whether or not the law requires it of a collective our size.

What we collect

In the past 12 months we have collected, or may collect, these categories of personal information:

• Identifiers: name, email address, IP address and online identifiers, from you and your device.
• Commercial information: tracks purchased, from you and Stripe.
• Internet activity: pages viewed, tracks played and server logs, from your device.
• Approximate location derived from your IP address, from your device.
• Audio and other content you choose to send us, such as demo links and messages, from you.

We use these for the purposes in our Privacy Policy and disclose them to the service providers listed there. Retention periods are also described there. We do not collect sensitive personal information as defined by the CCPA, other than what you choose to include in a message. Card details go directly to Stripe.

We do not sell or share your information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. We have no knowledge of selling or sharing the information of anyone under 16.

Your rights

• Know what personal information we collected, where it came from, why, and who received it.
• Get a copy of it.
• Delete it, subject to legal exceptions.
• Correct anything inaccurate.
• Opt out of sale or sharing. We do neither, but you can still turn off optional cookies with Cookie Settings in the footer.
• Be treated equally. We will not deny you service or charge you differently for using these rights.

How to make a request

Email [email protected] with the subject "CCPA Request" and tell us what you would like. We will confirm within 10 business days and respond within 45 days. If we need longer, we will tell you, and may extend by up to another 45 days.

We will verify your request by matching details you give us, such as the email address you used, against what we hold. We will only use those details to verify you. You can use an authorized agent, and we may ask for proof that they are acting for you. Requests are free unless they are excessive or unfounded.

Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and keep optional cookies off for that browser.

Shine the Light

California Civil Code section 1798.83 lets residents ask about disclosures of personal information to third parties for their direct marketing. We do not make these disclosures.