Privacy policy

1. Controller and contact

The controller is Beatseeker UG (haftungsbeschränkt) i. G., Unterer Ahlenbergweg 39a, 58313 Herdecke, Deutschland. Management: David Peters, Fabienne Centamore. Privacy enquiries: support@beatseeker.io.

2. Accounts and security

We process account identifiers, email address, display name, authentication records, verification state, security events, session metadata, TOTP enrolment state and hashed or truncated network information where necessary to provide and secure the account.

• Purpose/legal basis: contract performance (Art. 6(1)(b) GDPR) and legitimate interests in service security and abuse prevention (Art. 6(1)(f) GDPR).
• Session tokens expire or are revoked; expired database sessions are removed during scheduled cleanup.

3. Chrome extension

Each installation creates a random device identifier stored locally. Authorization stores that identifier, a human-readable platform label and extension version with a revocable server session. The extension stores its session token, settings, download and purchase-basket queue state, download history, app state and diagnostic logs in chrome.storage.local. It does not receive your password or Google credentials. Beatseeker stores an idempotent feature category and receipt time for accepted analysis, download and basket actions so account usage totals can be shown to administrators. These receipts do not contain basket contents, payment data or third-party account identifiers. When you explicitly press Report problem for a failed track, the extension sends that track's SoundCloud link, download-provider link, failure reason, extension version and the locally redacted automation log to the support inbox.

When Rekordbox fingerprint reuse is enabled, the extension stores the selected folder handle, relative paths, file size and modification details, audio durations and Chromaprint fingerprints locally in IndexedDB until you clear the cache. These data and the XML, audio and tag contents used by the local-library tools are processed on your device and are not uploaded to Beatseeker.

• Permissions are used for extension storage, sign-in redirection, tabs and scripting for supported free-track gates, Chrome downloads, and narrowly scoped cookie checks required by a supported flow. Optional Bandcamp artist-site, Beatport or Instagram access is requested only when you use the corresponding feature. Browser-session checks read only whether a current authentication cookie exists; cookie values are not stored or transmitted. Temporary basket access is removed again when a run stops or completes; a per-request local cleanup record retries removal after an interrupted start. Bandcamp or Beatport account identifiers, Beatport cart identifiers and payment data are not stored or transmitted, and Beatseeker never proceeds to checkout.
• Fingerprint reuse can be disabled before analysis. Clear saved cache removes the IndexedDB fingerprints and saved folder handles.
• Extension logout revokes the server session before local credentials are cleared.

4. Connected services

Google OAuth is optional and processes the identity data returned by Google. SoundCloud is connected separately and only when requested; Beatseeker processes OAuth tokens, playlist metadata, feed activity metadata and track links needed for analysis or export. Tokens are encrypted at rest where configured.

• Disconnecting a service removes or invalidates the corresponding connection where technically available.
• Playlist URLs, playlist contents and feed contents are not sent to GA4.

5. Subscriptions and payments

Stripe is the authoritative billing system. We process Stripe customer, Checkout Session, subscription, price, tax, invoice and status identifiers needed to create and reconcile subscriptions, handle renewal or cancellation, prevent duplicate processing, and provide support.

• Legal bases: contract performance and legal accounting/tax obligations (Art. 6(1)(b) and (c) GDPR).
• Beatseeker does not store full card details.

6. Support requests

Support submissions contain the email address, subject and message you provide, workflow category/status, optional admin assignee and an audit history. Do not include passwords, payment card details or unnecessary sensitive information.

• Legal bases: steps at your request/contract performance and legitimate interests in resolving and documenting support issues.
• A honeypot and a rate limit based on a salted hash of the source IP reduce abuse; the raw IP is not stored for this purpose.

7. Analytics and cookies

One Analytics choice controls both first-party D1 analytics and GA4. Consent Mode v2 starts with analytics and every advertising field denied. GA4 is not loaded until opt-in. Consented page views use normalized paths without query strings; GA4 receives no names, emails, playlist URLs or contents, feed contents, support content or Beatseeker user IDs.

• Legal basis: consent (Art. 6(1)(a) GDPR and §25 TDDDG).
• Withdrawal immediately disables both event pipelines, sends the denied consent update and removes GA and Beatseeker analytics identifiers.
• Raw D1 analytics are scheduled for deletion after 90 days; daily aggregates after 395 days. GA4 retention must match the reviewed property setting.

8. Advertising

Optional marketing storage and personalization are off by default and can be enabled or withdrawn separately in Cookie settings. No marketing provider is currently active. Before a third-party advertising provider is activated, its purposes, storage and recipients will be reflected here. House ads do not require third-party advertising storage.

9. Marketing messages

If you actively select the optional checkbox during signup or enable the preference in your account, we may use your account email to send occasional Beatseeker product news, beta updates, and promotional offers.

• Legal basis: consent (Art. 6(1)(a) GDPR). Signup and account use are not conditional on consent.
• The current preference and a versioned record of acceptance or withdrawal are stored as evidence of your choice.
• Withdraw at any time in Account > Profile or through an unsubscribe link in a marketing email. Withdrawal does not affect earlier lawful processing.

10. Processors and recipients

We use providers only to the extent required for the service and under applicable contracts.

• Cloudflare (Pages, Workers, D1 and KV) for hosting, security, delivery and first-party analytics storage.
• Stripe for Checkout, subscriptions, payments, tax, invoices and the Customer Portal.
• Resend for transactional account and support-related email and, only after marketing-message consent, occasional product updates and offers.
• Google for optional OAuth sign-in and, only after analytics consent, Google Analytics 4.
• SoundCloud when you connect an account to read playlists or feed activity, or export a private playlist.
• PlayaYield only after the separately applicable advertising and operational launch gates are enabled.

11. International transfers

Where a recipient processes personal data outside the EU/EEA, transfers rely on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses, together with supplementary measures where required. Provider-specific safeguards must be confirmed during launch review.

12. Retention

Data is kept only as long as required for its purpose, security, legal claims or statutory duties.

• Raw analytics: 90 days; daily route aggregates: 395 days.
• Account feature-usage receipts are kept for the account lifetime and removed when account deletion is finalized.
• Marketing-message consent is kept while active and its evidence for up to 36 months after withdrawal; other consent receipts: 36 months.
• Administrative audit records: 24 months, subject to counsel review.
• Support records: for the case lifetime and a reviewed follow-up period.
• Billing and tax records: for statutory German retention periods.
• Account deletion is scheduled after a 30-day recovery period; data subject to legal retention is restricted instead of erased.

13. Your rights

Subject to the statutory conditions, you may request access, rectification, erasure, restriction, portability, or object to processing. You may withdraw consent at any time and complain to a competent data protection supervisory authority. Contact us at the privacy address above.

14. Automated decisions and changes

Beatseeker does not use solely automated decisions producing legal or similarly significant effects. We update this notice when processing changes and publish the new version and effective date.