Privacy & playback

Track submissions

We store the Spotify track link, genre, submission time, verification state and editorial decisions. Pending and rejected submissions are private. A secret status link gives access to the status and any editorial message; keep it private.

Voting

If voting is enabled, your email is sent to the delivery provider to send a confirmation link. We store a keyed hash instead of your raw email in the chart database. Verification links expire after one hour. Voting does not create an account or subscribe you to marketing.

Abuse prevention

Short-lived hashes of network addresses help limit requests. Raw network addresses are not stored by the playlist application. Cloudflare and other infrastructure providers may process connection data under their own policies.

External services

Embedded players connect to Spotify. Voting security checks, when enabled, connect to Cloudflare Turnstile. Those services process data under their own policies. Playback depends on Spotify availability and account conditions.

Saved tracks and retention

Saved tracks (up to 200) and recently opened recordings (up to 30) stay in this browser’s local storage; voting tokens stay in session storage. Recently opened recordings are updated only when you open their player. No listening history is sent to our server as a user profile. Clearing browser storage removes them. Published tracks, results and vote records are retained for the catalog and chart history. Expired rate-limit buckets are removed during later requests.

Newsletter subscriptions

Newsletter subscriptions are separate from chart voting. We store the email, exact consent wording and version, consent and confirmation times, subscription state and delivery records. Confirmation expires after 24 hours; unconfirmed requests are removed after seven days. Every issue includes an unsubscribe link. Read the full subscription information.

Audience measurement & community

The public counter shows recorded visits, page views and countries over the last 30 UTC calendar days. It uses no tracking cookies or persistent visitor ID. Short-lived salted network hashes limit abuse; raw IP addresses and full referrers are not stored by the counter. Aggregate page and destination-host statistics are retained for up to 35 days. Suggestions and comments require publication consent and moderation. Informal idea support uses a browser identifier, stored locally and hashed on the server; it is not a verified unique-person vote.