Privacy Policy
Last updated: March 1, 2026
Introduction
Soundlash ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our website and services, in accordance with the General Data Protection Regulation (GDPR).
Data We Collect
Contact Form Data
When you submit a contact form, we collect:
- Your name
- Your email address
- Your message content
- Festival suggestion details (if applicable)
Spotify Integration
Important: Soundlash does not require you to connect your personal Spotify account. Playlists are created instantly and shared publicly:
- No personal Spotify data is collected or stored
- No Spotify login or authentication is required to create playlists
- Save playlists to your library by tapping the + button in Spotify
Cookies and Local Storage
We use minimal browser storage for site functionality. We do not use tracking cookies or store personal authentication data.
How We Use Your Data
- Contact requests: To respond to your inquiries and festival suggestions
- Playlist creation: To create Spotify playlists on your behalf when you use our service
- Service improvement: To improve our website and user experience
Data Retention
- Contact form data: Retained for up to 2 years or until your request is fully processed, whichever comes first
- Analytics data: Anonymous playlist creation statistics are retained for service improvement
Your Rights Under GDPR
As a user, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate personal data
- Right to erasure: Request deletion of your personal data
- Right to restrict processing: Request limitation of how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing of your personal data
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmissions.
Third-Party Services
We use the following third-party services:
- Spotify: For playlist creation on Soundlash's account (no user authentication required). Subject to Spotify's Privacy Policy
- Deezer: For audio previews. Subject to Deezer's Privacy Policy
- Supabase: For database hosting and contact form storage (EU-based servers)
Contact Us
To exercise any of your rights or if you have questions about this Privacy Policy, please contact us through our contact form.
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.
Policy Updates
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.