privacy policy
soundspace is a small platform run by one person. this is what we collect, why, and what we won't do.
what we collect
when you sign up:
- your email address (for login + occasional service messages)
- your chosen handle
- your birthday (only your age is shown — and only if you choose)
- your gender, if you choose to share it (optional, never required)
- your country, and your state if you're in the u.s. — used only for aggregated analytics about who's on soundspace. these fields are never shown on your profile and never visible to other users.
- your password, stored hashed — we never see it in plain text
if you sign up with apple or google, we get your email and (if you allow it) your name from that provider. we then ask you for the rest of the fields above on the next screen.
when you use the site, we also store:
- your profile fields — bio, favorite artist, genres, avatar, profile song
- your reviews, ratings, replies, and reactions
- prior versions of any review you edit (kept so moderators can tell whether a positive review was rewritten into something abusive after the fact — never shown publicly)
- your bookmarks (reviews you've saved — private to you)
- your friendships and friend requests
- users you've blocked, and users who've blocked you (so we can hide content in both directions)
- reports you've filed about other content, and any reports filed about yours (used for moderation)
- basic technical info (browser type, ip address) via standard server logs, used for security and debugging
when you use the soundspace mobile app, we also store:
- your push notification token (only if you grant permission), so we can notify you about replies, new friend requests, and album drops
- photos you choose for your profile picture (uploaded through the in-app camera roll or camera, cropped on device, and stored in supabase storage — same as the web)
what we don't do
- we don't sell your data. ever.
- we don't share it with advertisers or data brokers.
- we don't use your reviews to train external ai models.
- we don't track you across other sites.
- we don't use third-party tracking cookies.
third parties we use
to run the site we rely on a few services. each one only gets the minimum data they need to do their job:
- supabase — stores your account, profile, and reviews. (database + auth)
- vercel — hosts the website and serves pages to you.
- apple music — we query their public catalog when you search for music. we don't send your account info to apple.
- resend (when enabled) — sends transactional emails like welcome and password-reset messages.
each of these has their own privacy practices. we've picked providers that take privacy seriously, but we encourage you to read their policies if you're curious.
who can see your stuff
your profile, reviews, replies, and reactions are public by default — that's the point of the platform. your email, birthday, gender, country, and state are private and never shown to other users.
your bookmarks, your friend requests, and the list of users you've blocked are visible only to you.
how we use the demographics you give us
age, gender, country, and state (when you're in the u.s.) are used only for aggregated analytics — “what does our user base look like,” “where are signups coming from.” we don't sell this data, we don't share individual records with anyone, and we don't use it to target you with ads (we don't run ads at all). it's how the owner gets a basic read on whether the platform is reaching the people it's for.
cookies
we use a small number of strictly necessary cookies to keep you logged in. we don't use cookies for advertising or cross-site tracking.
your rights
you can:
- edit your profile information anytime from /profile/edit
- delete individual reviews from your own profile
- delete your entire account by emailing us — see below
- request a copy of all data we hold about you by emailing us — we aim to respond within 30 days
account deletion
on the website: visit /settings and tap “delete account.” it's self-serve.
on the mobile app: open the settings tab (gear in the top right of the profile screen) and tap “delete account” — it opens the same self-serve flow on soundspace.fm.
deletion removes your profile, reviews, replies, friendships, friend requests, blocks, bookmarks, reports, push token, uploaded avatar, and any saved demographic info (country, state, gender, age) from active storage within minutes. prior versions of any review you edited are removed at the same time. public reviews may persist briefly in cached pages or backups before they're purged. if you'd rather have us do it manually, email info@soundspace.fm from the address tied to your account.
moderation
if a review or profile is reported and breaks the terms, we may hide it from public view, delete it, or — for severe or repeat violations — suspend the account. we keep a small audit record (which moderator took which action and when) so we can stand behind our calls if you appeal. you can always email info@soundspace.fm to appeal a moderation decision.
children
soundspace is not for children under 13. if you believe a child under 13 has an account, please email us so we can remove it.
where we operate
soundspace operates from the united states. if you're using the site from elsewhere, your data is transferred to and stored in the u.s. (where our hosting providers operate).
changes
if we make significant changes to this policy, we'll update the “last updated” date and, for material changes, notify you in the app or by email before the change takes effect.
contact
privacy questions or requests: info@soundspace.fm