Privacy Policy

Last updated: July 12, 2026

1. Information We Collect

When you use SoundShop, we collect the following information:

  • Account Information: Email address and authentication data when you sign up via Supabase Auth.
  • Usage Data: Download history, IP address (for rate limiting), and interaction with the platform (pages visited, tracks previewed).
  • Payment Information: Redemption codes and VIP membership status. We do not store credit card or payment method details — purchases are processed through third-party platforms (Taobao, Creem).
  • Technical Data: Browser type, device information, and access logs collected automatically by our hosting provider.

2. How We Use Your Data

  • To provide and maintain the SoundShop service (account management, download delivery).
  • To enforce rate limits and prevent abuse (IP-based download quotas).
  • To manage VIP memberships and redemption codes.
  • To improve the platform through aggregated, anonymized analytics.
  • To communicate service updates, if you have opted in.

3. Data Storage & Security

Your data is stored on Supabase (PostgreSQL database) with encryption at rest and in transit. Authentication is handled by Supabase Auth with industry-standard security practices. We implement Row-Level Security (RLS) policies to ensure data access is properly scoped.

Audio files are stored on Cloudflare R2 with access controlled via signed URLs. Preview and download URLs are time-limited.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared only in the following circumstances:

  • Service Providers: Supabase (database/hosting), Cloudflare (CDN/storage) — these providers process data solely to deliver the SoundShop service.
  • Legal Compliance: If required by law, court order, or governmental regulation.

5. Cookies & Tracking

SoundShop uses minimal cookies for essential functionality (authentication sessions). We use Plausible Analytics for privacy-friendly, cookie-less usage analytics. No advertising cookies or third-party tracking cookies are used.

6. Your Rights

You have the right to:

  • Access your personal data stored by SoundShop.
  • Request correction or deletion of your data.
  • Export your data in a portable format.
  • Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at the email address listed in the Contact section below.

7. Third-Party Services

SoundShop integrates with the following third-party services. Each has its own privacy policy:

  • Supabase — Authentication, database, and Edge Function hosting.
  • Cloudflare R2 — Audio file storage and delivery.
  • Creem — Payment processing for international users.
  • Taobao — Payment processing for Chinese users (via redemption codes).
  • Plausible Analytics — Privacy-focused usage analytics.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of SoundShop after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, please contact us: