Legal
Privacy policy
Last updated 21 July 2026. What we collect, why we are allowed to, how long we keep it, and how to get it deleted.
Who we are, and which hat we are wearing
LouderLink is a music smart-link tool for artists, managers and labels. Two different groups share data with us, and the law treats them differently:
- Artists who run an account. For your account data we are the data controller.
- Fans who visit an artist's links. For fan data we are usually the artist's processor: the artist decides what is collected and why, and we handle it on their instructions. If you are a fan and want your data removed, you can ask us directly and we will action it, and you can also ask the artist.
Contact for any privacy question or request: privacy@louderlink.com.
Artist accounts: what we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email and password hash | To create and secure your account | Performance of a contract |
| Artist or project name | Shown on your public pages | Performance of a contract |
| Your links, pages and settings | To provide the service | Performance of a contract |
| Billing records | To take payment and meet tax duties | Contract and legal obligation |
| Connected platform tokens | To perform actions you asked for (for example a pre-save) | Consent, given at the connect screen |
| Login and security logs | To detect abuse and keep accounts safe | Legitimate interests |
| Service emails | Confirmations, receipts, security notices | Contract and legitimate interests |
Card details are handled by Stripe and never reach our servers.
Fan data, and the platforms we connect to
When a fan uses an artist's link we may process the data below. In every case the fan grants access themselves, for the specific action they chose.
Spotify
If a fan pre-saves a release, we ask Spotify for permission to read the email on their account, to save the release to their library on release day, and to follow the artist if the artist enabled that. To perform the save later we store an encrypted Spotify token until the release happens, then delete it. Legal basis: the fan's consent.
YouTube (Google)
If a fan unlocks a subscribe-gate, we ask Google for permission to read the email on their account and to subscribe them to the artist's channel. We keep the email and a record of the unlock. We do not retain a Google token after the action. Legal basis: the fan's consent.
Email sign-ups
Fans can give an artist their email through a sign-up form. That list belongs to the artist. Legal basis: the fan's consent, held by the artist.
Analytics and advertising pixels
On public pages we record page views, clicks, approximate country, referrer and device type. Where the artist has set them up, we also load advertising pixels (Meta, TikTok and others) and may send matching conversion events to those platforms from our servers.
For visitors in the UK, the EEA and Switzerland, analytics and advertising are not loaded until they accept in the cookie banner, and nothing beyond the strictly necessary runs before that choice. Elsewhere they are on by default and can be switched off at any time from the cookie settings link in the footer. See the cookie policy for the full list.
Who else sees the data
We do not sell personal data and we do not use fan data to advertise our own product. We share it only with providers that make LouderLink work:
| Provider | Purpose | Where |
|---|---|---|
| Microsoft Azure / our hosting | Running the app and database | UK / EU |
| Cloudflare | DNS, security, bot checks, sending email | Global network, US company |
| Stripe | Payments and subscriptions | US, with UK/EU entities |
| Spotify, Google | Only the action the fan authorised | US |
| Meta, TikTok and other ad platforms | Conversion measurement, if the artist enabled it and the visitor accepted | US |
| Mailchimp, Kit | Only if an artist connects their own email provider | US |
An artist can see the fan data collected through their own pages. Artists on team plans can grant that access to teammates they invite.
Where a provider is outside the UK or EEA, transfers are covered by the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, together with the provider's own safeguards.
How long we keep things
| Data | Kept for |
|---|---|
| Spotify pre-save token | Until the release is saved, then deleted immediately |
| Fan emails and pre-save records | Until the artist deletes them or closes the account |
| Page analytics | Up to the retention window of the artist's plan, then aggregated |
| Artist account and content | Until you delete the account, then removed on our normal cycle |
| Billing and tax records | Six years, as tax law requires |
| Security logs | Up to 12 months |
Your rights
If you are in the UK or EEA you have the right to: get a copy of your data; correct it; have it deleted; restrict or object to how we use it; withdraw consent at any time; and receive it in a portable format. We do not make automated decisions that produce legal effects about you.
To use any of these, email privacy@louderlink.com. We reply within 30 days, and we do not charge. Artists can also export a fan list to CSV, and delete their account and its contents, from account settings at any time.
If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.
Disconnecting, as a fan
- Spotify: remove LouderLink under Spotify → Apps. We then delete the Spotify data we hold for you within five days.
- Google/YouTube: remove LouderLink at Google → Third-party access. We action deletion within seven days.
- Straight after you pre-save or unlock a gate, the confirmation screen gives you a one-click link to delete that specific record.
- Or just email privacy@louderlink.com and we will do it for you.
Security
Traffic is encrypted in transit. Platform tokens and provider keys are encrypted at rest with keys held separately from the database. Passwords are stored only as salted hashes. We request the narrowest permission each feature needs and nothing more. Access to production data is limited to people who need it.
Children
LouderLink is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.
Changes
If we change this policy we update the date at the top, and for material changes we email account holders. Questions or requests: privacy@louderlink.com.
Questions about this document? Email privacy@louderlink.com.