Privacy Policy

1.Information We Collect

We collect information in two ways: what you provide directly, and what is generated automatically when you use the Site.

Information you provide:

• Song submissions — the audio file, track title, artist name, and any notes you include. We do not ask for your name or email as part of a standard submission.
• Contact or support messages — if you reach out to us directly, we retain the content of that communication.

Information collected automatically:

• IP address — logged at the time of each submission to prevent spam and enforce rate limits. Your IP is not displayed publicly and is not used for advertising.
• Server logs — standard web-server access logs (request URL, timestamp, response code, user-agent) are kept for security and diagnostic purposes.
• Playback & stream activity — aggregate counts of song plays are recorded. These are attached to the track, not to any individual visitor.

2.How We Use Your Information

• To receive, queue, and review submitted music during live streams.
• To detect and block submission spam or abuse (rate limiting by IP).
• To operate and improve the Site (server diagnostics, error tracking).
• To display aggregate play counts on the public music catalog.
• To respond to messages or inquiries you send us.

We do not use your information for profiling, behavioral advertising, or any automated decision-making that affects you.

3.Payments & Donations

Skip-the-Line boosts and donations are processed through Cash App (Block, Inc.). When you send a payment via Cash App, that transaction is governed by Cash App’s Privacy Policy. HeartStruck does not receive or store your Cash App credentials, card numbers, or bank details.

We log the transaction amount and Cash App cashtag associated with confirmed donations solely to verify skip-queue eligibility and maintain a payment log. This log is visible only to the HeartStruck admin and is never shared.

4.Cookies & Session Data

The Site uses a session cookie for the admin control panel only. Visitors to the public site do not receive any tracking or persistent cookies from us.

• Admin session cookie — set only after an admin logs in, expires when the browser is closed or the session times out. Used solely to authenticate admin actions.
• No analytics trackers — we do not use Google Analytics, Meta Pixel, or any third-party behavioral tracking scripts.
• No advertising cookies — the Site does not serve ads and does not set ad-network cookies.

5.Streaming & Playback

Live stream video is delivered via HLS (HTTP Live Streaming) from our own server. Audio tracks in the music catalog are also served from our own server. Neither uses an external CDN or analytics service that would track you.

The hls.js player library is loaded from a CDN (cdn.jsdelivr.net) to play the live video stream. Loading this script shares your IP address with jsDelivr as a routine part of fetching the file. jsDelivr’s privacy policy is available at jsdelivr.com.

6.Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to any third party.

We may share information only in these limited circumstances:

• Legal obligation — if required by a valid court order, subpoena, or applicable law.
• Safety — to protect the rights, property, or safety of HeartStruck, its users, or the public, where disclosure is permitted by law.
• Service providers — our web host and server operator may have incidental access to server logs as part of normal infrastructure operations. They are not permitted to use this data independently.

7.Data Retention

• Submission files — retained until removed by the admin (e.g., after review, at the submitter’s request, or during cleanup).
• IP rate-limit logs — rolling window of recent activity; older entries are automatically pruned.
• Payment logs — retained for administrative record-keeping and dispute resolution.
• Server access logs — retained for up to 90 days then deleted.

If you want your submitted audio file removed, contact us at the address below and we will delete it promptly.

8.Your Rights

Depending on where you live, you may have rights under applicable privacy laws (such as CCPA for California residents or GDPR for EU/EEA residents). These may include:

• The right to know what personal data we hold about you.
• The right to request deletion of your personal data.
• The right to opt out of any sale of personal data (we do not sell data).

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days.

9.Children’s Privacy

The Site is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has submitted personal information to us, contact us and we will delete it.

10.Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the Site after a revision constitutes your acceptance of the updated policy.

11.Contact

Questions about this policy or requests regarding your data:

Also see our Terms of Use & Submission Agreement for additional rules governing use of the Site.