Privacy Policy

We don't run ads. We don't sell data.

We use cookieless, anonymised analytics (Vercel Analytics) to understand traffic in aggregate. If you use the contact form, we receive your name and email to reply to you — nothing more.

If you subscribe to The Inbox Beat newsletter, we collect your email address and send it to Beehiiv (our newsletter platform). Emails include open and click tracking — see the Newsletter section below.

Third-party services on this site: YouTube (video embeds), Vercel (hosting and analytics), Upstash (like counter storage), and Beehiiv (newsletter), each with their own data practices described below.

Song pages include a Like button. If you use it, your preference is stored in your browser's local storage and an aggregate count is incremented on our server. No account or personal information is required or collected.

We use Vercel Analytics, a privacy-friendly traffic measurement tool. It does not use cookies, does not track you across sites, and does not store your IP address.

Data collected in aggregate:

• Pages visited and referrer URL
• Country or region (derived from IP, then IP is discarded)
• Device type, operating system, browser
• Page performance metrics (Web Vitals)

No individual user profiles are created. This data is processed by Vercel Inc. (United States) under their privacy policy. As Vercel Analytics does not process personal data, no consent banner is required under GDPR for this service.

See: Vercel Privacy Policy

When you submit the contact form, we collect your name, email address, and message. This data is transmitted via Resend (email delivery service) and received in our private inbox.

We use this information solely to respond to your enquiry. We do not add you to any mailing list, share your data with third parties, or use it for any other purpose.

Legal basis under GDPR: legitimate interests (responding to a voluntary enquiry you initiated). Retention: messages are kept only as long as necessary to handle your request.

To request deletion of your data, contact us via the form or the channels listed at the bottom of this page.

If you subscribe to our weekly newsletter via the signup form on this site, we collect your email address and transmit it to Beehiiv (our newsletter platform), which processes it as our sub-processor.

We use this address solely to send you The Inbox Beat. We do not share it with third parties for their own purposes.

Legal basis under GDPR: consent (Article 6(1)(a)) — you provide explicit consent at the time of signup. You may withdraw consent at any time by clicking the unsubscribe link in any email, or by contacting us via the form on this site.

Tracking pixels and click tracking

Emails sent via Beehiiv contain tracking pixels (open tracking) and tracked links (click tracking). These trackers are subject to Article 82 of the French Informatique et Libertés law and the ePrivacy Directive. They are used for the following purposes:

• Deliverability management — measuring open rates to identify inactive subscribers and adapt sending frequency or stop sending to addresses that no longer engage. Only the date of last open (day only, no time) is retained for this purpose; previous values are deleted on each update. This use is exempt from consent under §3.2 of the CNIL recommendation of 12 March 2026.
• Campaign performance measurement — measuring open rates and click rates to understand engagement and improve content, subject lines, and send timing. This use requires consent, which you provide at the time of subscription.

The data processed by these trackers includes: open event (date), click event (link clicked), IP address, and device/email client information. This data is processed by Beehiiv under their privacy policy.

You disclosed your email address by subscribing; the trackers will operate on all devices on which you open our emails.

To withdraw consent from tracking at any time, click the unsubscribe link in the footer of any email. Withdrawal stops tracking in all future emails. See also: Beehiiv Privacy Policy.

Song pages embed YouTube videos served by Google. When a video loads, Google may collect:

• Your IP address
• Device and browser information
• Viewing behaviour and watch history (if you are logged into Google)
• Cookies set by Google's domains

This data is processed by Google under their own privacy policy. We have no access to it and no control over it.

See: Google Privacy Policy · YouTube Terms of Service

Your browser stores the following functional preferences:

• isc-view-mode — remembers whether you prefer grid or list view in the songbook. Stored locally on your device only, never transmitted to any server.
• isc_liked — remembers which songs you have liked, so the Like button reflects your previous choice. Stored locally on your device only, never transmitted to any server. You can clear it by clearing your browser's site data.

These entries are functional (not tracking) and do not require consent under GDPR. No cookies are used.

We do not set any cookies ourselves. Vercel Analytics operates without cookies. YouTube may set cookies when video content is loaded. You can manage or block cookies through your browser settings.

This site relies on the following third-party infrastructure providers, each based in the United States:

• Vercel Inc. — hosting, CDN, and analytics
• Resend Inc. — email delivery (contact form only)
• Upstash Inc. — Redis database used to store aggregate song like counts. No personal data is stored; counts are integers keyed by song identifier. HTTP requests to this service may be logged by Upstash as part of standard infrastructure operations.
• Beehiiv Inc. — newsletter platform used to manage subscriptions and send The Inbox Beat. Processes subscriber email addresses and engagement data (open/click tracking) as described in the Newsletter section above. Only processes data for subscribers who have opted in.

If you are located in the EEA, your data may be transferred to the US. These providers rely on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers under GDPR.

If you are located in the European Economic Area, you have rights under the GDPR including the right to access, rectification, erasure, restriction of processing, and data portability.

For data you submitted via the contact form, contact us directly to exercise these rights. For data held by Google via YouTube embeds, use Google's privacy controls. For Vercel Analytics, as no personal data is stored, there is nothing to access or delete.

You also have the right to lodge a complaint with your local data protection authority.

This site is not directed at children under 13. We do not knowingly collect data from children.

If we materially change how data is handled, we will update this page and revise the “Last updated” date. Continued use of the site after changes are posted constitutes acceptance.

Questions about this policy? Use the contact form or reach us via the Inbox Senders Club YouTube channel or LinkedIn page.