Privacy policy
Last updated: 19 October 2026
In short
You can search artists without an account, and we store nothing about you then. If you log in, we store your email address, the artists you save and your notification settings, so we can show your list and email you about new releases and tour dates. We don’t sell or share your data, show no ads and use no tracking or analytics.
Who is responsible
is run by Ruma, who is considered as the “controller” (under the EU’s General Data Protection Regulation, GDPR). For questions or requests about your data, write to arttrackcontact@gmail.com.
What we store and why
Your email address
- Why
- To log you in (we email you a login link and code) and to send the notifications you choose.
- Legal basis
- Providing the service you signed up for
- Kept
- Until you delete your account
Display name (optional)
- Why
- Shown at the top of the page instead of your email.
- Legal basis
- Providing the service
- Kept
- Until you change it or delete your account
Your artists (My Artists) and when you added each one
- Why
- To show your list, and to know which artists to check and what's new for you.
- Legal basis
- Providing the service
- Kept
- Until you remove the artist or delete your account
Notification settings: on or off, the hour you want emails, when the last one was sent
- Why
- To send at most one email a day, at your hour, only with new items.
- Legal basis
- Providing the service
- Kept
- Until you delete your account
A random unsubscribe code
- Why
- So the “Turn these emails off” link in every email works without logging in.
- Legal basis
- Providing the service
- Kept
- Until you delete your account
Email history: when each notification email was sent, to which address, how many artists and items, and whether it worked
- Why
- To never send you two emails for the same hour, and to find delivery problems.
- Legal basis
- Our legitimate interest in sending emails reliably
- Kept
- 108 days
Login session (a cookie)
- Why
- To keep you logged in.
- Legal basis
- Strictly necessary for logging in
- Kept
- Until you log out or the session expires
Server logs (IP address, pages requested, time)
- Why
- To run the site, find errors and protect it from abuse.
- Legal basis
- Our legitimate interest in a working, secure site
- Kept
- A short time, as set by our hosting providers
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Your email address | To log you in (we email you a login link and code) and to send the notifications you choose. | Providing the service you signed up for | Until you delete your account |
| Display name (optional) | Shown at the top of the page instead of your email. | Providing the service | Until you change it or delete your account |
| Your artists (My Artists) and when you added each one | To show your list, and to know which artists to check and what's new for you. | Providing the service | Until you remove the artist or delete your account |
| Notification settings: on or off, the hour you want emails, when the last one was sent | To send at most one email a day, at your hour, only with new items. | Providing the service | Until you delete your account |
| A random unsubscribe code | So the “Turn these emails off” link in every email works without logging in. | Providing the service | Until you delete your account |
| Email history: when each notification email was sent, to which address, how many artists and items, and whether it worked | To never send you two emails for the same hour, and to find delivery problems. | Our legitimate interest in sending emails reliably | 108 days |
| Login session (a cookie) | To keep you logged in. | Strictly necessary for logging in | Until you log out or the session expires |
| Server logs (IP address, pages requested, time) | To run the site, find errors and protect it from abuse. | Our legitimate interest in a working, secure site | A short time, as set by our hosting providers |
Artist information, links, releases and tour dates come from public music services and are shared by everyone; they aren’t personal data. When you search, our server asks services such as MusicBrainz, Deezer, Bandcamp, Wikipedia, Songkick and others on its own behalf: your email or account is never sent to them, and your browser doesn’t contact them.
Emails we send
- Login emails, when you ask for one.
- Notification emails about new releases and tour dates of your artists: at most one a day, only when something is new, while notifications are on (they are on when you create an account).
Turn notifications off any time with the switch in your profile or the “Turn these emails off” link in every email. Notification emails go to the address of your account at the time they’re sent.
Cookies
We use one kind of cookie: the login session cookie, which keeps you logged in. It’s strictly necessary, so there is no cookie banner. There are no advertising, analytics or tracking cookies, and the site’s fonts are served by us, not by Google. The browser also remembers, for the open tab only, which list of artists you last viewed (for the “back” link); this never leaves your browser.
Service providers
We use these companies to run the site. They process data only on our behalf.
- Supabase: Database and logins: everything in the table above except server logs of the website. Location: European Union.
- Resend: Sends the notification emails: sees your email address and the email's content. Location: United States.
- Vercel: Hosts the website: handles your requests and keeps short-lived server logs. Location: United States company; servers worldwide.
Where data goes to the United States, it’s protected by the providers’ data processing agreements, which include the European Commission’s Standard Contractual Clauses.
How long we keep it
Your account data stays until you delete your account; then it’s deleted from our database at once (it may remain in our providers’ backups for a short time). Email history is deleted after 108 days. Server logs are kept only briefly by our hosting providers.
Your rights
Under the GDPR you can:
- see the data we hold about you, and get a copy of it;
- correct it: change your email address or display name in your profile;
- delete it: Delete my account in your profile removes your account, your artists, your settings and your email history;
- object to or restrict how we use it, and stop notification emails at any time.
For anything you can’t do in your profile, write to arttrackcontact@gmail.com. An answer will be provided within the timeframes stipulated by the GDPR. You also have the right to lodge a complaint with a data protection authority.
Changes
If what we store or why changes, we update this page and the date at the top.