Presave

Privacy policy

Last updated 30 September 2026

Draft awaiting legal review. Items marked [to confirm] still need a decision before this applies.

1. Who is responsible

[to confirm: legal name of the company and address] is responsible for your data. Contact: presaveclub@gmail.com. Data protection officer (encarregado, LGPD art. 41): [to confirm: name and contact].

2. What we collect

• Account: your email, and the name and city you give us.
• Artists: artist name, photo, bio and links; your tracks, their titles, descriptions, genres, plans and release dates.
• Listens and pre-saves: which tracks you listened to and when, where in the track you pressed pre-save, and whether you agreed to share your email with the artist.
• Creators: your creator links and the listens they brought.
• Security: a scrambled fingerprint of your IP address, used only to limit repeated attempts and deleted after a day. We don’t store the address itself.

3. Why, and on what basis

• To run the service you asked for: your account, listens, pre-saves, links (contract).
• To share your name, email and city with the artist of a track you pre-save, so they can tell you when it’s out. This is part of a pre-save and is said on the button each time; you accept it once, when you sign up. You can stop sharing with any artist at any time [to confirm with our lawyer: legal basis for sharing the email].
• To keep the service safe from abuse and leaks (legitimate interest).
• To tell you a track you pre-saved is out (part of the pre-save you asked for).

4. Who sees it

• An artist sees the name, email and city of fans who pre-saved their tracks. They see a fan for 12 months after that fan’s last pre-save with them; after that only the counts remain. In My pre-saves you can stop sharing your details with any artist: they keep the count but no longer see who you are, and you get no more alerts about them. Pre-saving one of their tracks again shares your details again.
• Service providers who process data for us: hosting in the EU [to confirm: provider], email delivery (Resend), and card payments (Stripe) once payments are live.
• We never sell your data and we don’t show ads.

5. How long we keep it

• Tracks dropped on the home page and not confirmed: deleted after 7 days.
• Login sessions: 90 days.
• Security fingerprints: 1 day.
• Your account: until you delete it.

6. Your rights

You can see and download your data (Profile → Download my data), correct it (Profile), and delete your account (Profile → Delete my account). Deleting removes your email and name for good; artists keep only the counts. You can also object to processing or withdraw consent at any time, and complain to a data protection authority: in Ireland the Data Protection Commission, in Brazil the ANPD [to confirm: lead authority once the company is set up]. Your profile is at Profile.

7. Cookies

We use only the cookies the site needs to work: one that keeps you logged in, and one that lets you finish your profile right after dropping a track. No tracking or advertising cookies. Your browser also remembers where you were in a listen, so a dropped connection can resume.

8. Your city

You pick your city from a list of world cities kept on our own servers, so what you type never goes to a map or search company. Artists see your city and its country; the fan map shows cities, never people. The city list comes from GeoNames, under the CC BY 4.0 licence.

9. Changes

If we change this policy in a way that matters, we tell you by email first.