SOURCD

Privacy Policy

Last updated 2026-08-31

This policy explains what Sourcd collects, why, and the choices you have over your data.

What we collect

  • Account: email address, username, optional display name, and a password (stored hashed by our auth provider).
  • Content you create: uploads and links, cover art and avatars, artist and track details, disclosure notes, playlists, ratings, favourites, follows, reports.
  • Activity: plays and listening progress, used for play counts, discovery ranking, and (in future) payouts. We log completed listens per track and user.
  • Support & legal: messages you send us and copyright notices you file.
  • Technical: our hosting and infrastructure providers process IP addresses, device/browser info, and request logs to run and secure the Service.

How we use it

  • to operate the Service — sign-in, playback, discovery, playlists, followers, notifications;
  • to compute stats shown to artists (plays, monthly listeners, followers) and to rank discovery;
  • to keep the platform safe — spam, fraud, and abuse prevention, and enforcement of our Terms;
  • to respond to your support requests and legal notices.

We do not sell your personal information, and we do not run third-party advertising.

Service providers

We share data with vendors who process it on our behalf:

  • Supabase — database, authentication, and realtime.
  • Cloudflare R2 — storage and delivery of uploaded audio and images.
  • Vercel — application hosting and request logging.

Linked media (YouTube, Vimeo, SoundCloud, etc.) is played from those platforms; when it loads, they receive your IP and may set their own cookies under their policies.

Cookies

We use first-party cookies only for authentication (keeping you signed in) and for remembering your light/dark theme choice. No advertising or cross-site tracking cookies.

Retention

We keep your data while your account is active. When you delete your account from Settings, your profile, artist, tracks, ratings, favourites, and playlists are removed; residual copies may persist briefly in backups. Aggregate, non-identifying statistics may be retained.

Your choices

  • Update your username, display name, and password in Settings.
  • Delete your account and content from Settings.
  • For access, correction, or deletion requests we can't self-serve, contact us.

Children

Sourcd is not directed to children under 13, and we don't knowingly collect their data. If you believe a child has given us information, contact us and we'll delete it.

Changes

We'll post updates here with a new date.

Contact

/contact