Privacy Policy

Last Updated: May 2, 2026

TL;DR

No advertising cookies and no cross-site tracking
Submitted content is stored only to provide the features you use
IP addresses and request metadata are processed for security, abuse prevention, and rate limiting
Approved song data may be shared with external playlist services when integrations are enabled
You can request access, correction, or deletion where applicable

1. Controller and Scope

This Privacy Policy explains how data is processed when you use this website and its related features. The controller responsible for this Service is the site owner of vxeyraa.link.

You can contact the controller using the contact form on the main page. If you want to exercise privacy rights, request deletion, or ask about stored data, please include enough information for us to identify the relevant submission or account-related record.

2. Legal Basis for Processing

Where the GDPR applies, we process personal data based on the following legal bases:

Art. 6(1)(f) GDPR - legitimate interests: Operating and securing the Service, preventing abuse, spam, unauthorized access, rate-limit bypasses, and duplicate voting
Art. 6(1)(a) GDPR - consent: Voluntarily submitted information, such as contact form details, optional usernames, song suggestions, and question content
Art. 6(1)(b) GDPR - performance of a requested service: Processing data needed to provide features you intentionally use, such as submitting questions, tracking question status, suggesting songs, or sending contact messages
Art. 6(1)(c) GDPR - legal obligations: Processing or disclosing information where required by applicable law

3. Information We Collect

When you use our Service, we may collect the following types of information:

Anonymous Q&A System

Question Content: The text of questions you submit
Tracking Code: A unique identifier generated for each question
Timestamps: When questions are submitted and answered
Moderation / safety checks: Automated abuse and hostility screening metadata related to submission processing

Song Suggestions

Song Information: Title, artist, and link to the song
Optional Username: Name you provide when suggesting songs
Timestamps: When suggestions are submitted
Approval Status: Pending, approved, or rejected status
Upvotes: An anonymized voter key derived from request data, plus vote dates and timestamps, to enforce voting limits and count votes

Contact Forms

Personal Information: Name and email address
Message Content: Subject and message text
Timestamps: When the form is submitted

Live Activity / Presence Features

These features display activity information of the site owner only. No visitor data is used to generate or display this information.

Spotify playback metadata: Track title, artist, album, album artwork, track link, and playback progress when the site owner chooses to make current listening activity visible
Game presence metadata: Current game title, status text, artwork, and activity timestamps when the site owner chooses to publish current gaming activity
Presence schedule: A manually configured status schedule used to display the site owner’s current availability or presence message, such as sleeping, working, or school

Some presence data may be sourced from third-party services, such as Spotify, or from scripts operated by the site owner. This data is voluntarily published by the site owner and is not derived from visitors.

Admin / Security Information

Admin session cookie: An essential session cookie used only for authenticated admin access
Security logs: Logs may include IP addresses, request paths, usernames, timestamps, rate-limit events, login failures, and other security or operational events
Country blocking signals: When the site is behind Cloudflare, country information may be used to block access to the admin area

Technical Information

IP Address: Processed for rate limiting, spam prevention, Turnstile verification, login protection, abuse detection, and certain security logs
Request / browser metadata: Standard request information needed to operate the service and protect it from abuse

4. How We Use Your Information

We use the collected information to:

Provide the Service functionality (Q&A system, song suggestions with moderation, upvoting, contact forms)
Respond to your questions and inquiries
Moderate and approve song suggestions
Prevent abuse, spam, and ensure security of the Service
Enforce daily voting limits and prevent duplicate or abusive voting
Display the site owner's own live activity features, such as now-playing music, current game presence, and presence status
Publish approved songs to external playlists when those integrations are enabled
Operate and secure the admin area
Improve and maintain the Service

5. Data Storage, Hosting, and Security

Your data is stored in a SQLite database on our server. Depending on the hosting setup, data may be processed by the server provider needed to operate the website. The hosting location and provider may change over time, but we aim to keep regular service data hosted within the European Union where reasonably possible.

We implement reasonable technical and organizational security measures to protect your information from unauthorized access, alteration, or destruction. However, no method of transmission over the Internet is 100% secure.

6. Data Sharing and Third Parties

We do not sell your personal information. We may share limited data with third-party service providers when needed to operate this Service and its optional integrations.

We may disclose your information if required by law or to protect our rights and safety.

Cloudflare Turnstile: Used to verify submissions and login attempts and reduce abuse
Discord: New anonymous question notifications may be sent to a private Discord webhook. These notifications are used to alert the site owner that a new question was submitted and do not need to include the full question content.
Spotify: Used for now-playing display and, when enabled, for approved-song playlist syncing
YouTube / Google: When enabled, approved songs may be added to a YouTube playlist

If approved-song playlist sync is enabled, approved song titles, artists, links, and related metadata may be used to search for and add matching tracks or videos on external platforms.

Some third-party providers may process data outside the European Union or European Economic Area. Where required, such transfers are based on appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms.

Where providers process personal data on our behalf, we use data processing agreements where required and reasonably available.

7. Anonymous Q&A System

Questions submitted through the Q&A system are intended to be anonymous to other visitors. We do not ask for directly identifying personal information with questions. However, because technical data such as IP addresses may be processed for security and abuse prevention, submissions may be considered pseudonymous rather than fully anonymous under privacy law. You should be aware that:

Anyone with your tracking code can view your question and its answer
Do not include personal information in your questions if you wish to remain anonymous
IP addresses may still be processed for security and abuse-prevention purposes even though questions are not publicly tied to your identity

8. Data Retention

We retain your data as follows:

Questions: Retained indefinitely unless deleted by you or marked for deletion
Song Suggestions: Retained indefinitely
Song votes: Vote records are retained so long as needed to preserve vote history and operate vote totals / time-based counts. Each vote record includes a pseudonymous voter identifier — a one-way HMAC hash of your IP address and a server-side secret — which is retained indefinitely with the vote history. Your raw IP address is not stored with vote records.
Contact Forms: Retained for a reasonable period to respond to inquiries and handle follow-up questions
Live activity / presence: Site owner activity data is displayed while active and may be stored temporarily in server memory. Game presence automatically expires if it is not refreshed.
Security logs: IP-based security events are usually retained for up to 24 hours unless a longer retention period is needed to investigate abuse, attacks, or unauthorized access attempts
Server logs: Retained according to server log rotation settings or until manually removed
Admin sessions: Retained only for the lifetime of the session cookie unless cleared sooner

9. Your Rights

You have the right to:

Delete your question within 5 minutes of submission
Mark your question for deletion after 5 minutes. Marked questions are reviewed and typically deleted within 24 hours, unless there is a reason to keep them temporarily, such as abuse review or accidental deletion prevention.
Request deletion of your contact form submission
Request information about data we have stored
Request correction of inaccurate data
Object to processing based on legitimate interests
Withdraw consent where processing is based on consent
Request restriction of processing where applicable

If you are in the European Union, you also have the right to lodge a complaint with a data protection supervisory authority.

10. Cookies

This Service does not use cookies for advertising or cross-site tracking. However, it does use an essential admin session cookie for authenticated access to the admin area.

11. Security and Abuse Prevention

We use technical and organizational measures intended to protect the Service and reduce abuse. These may include rate limiting, Turnstile verification, hostility screening for anonymous questions, temporary IP-based restrictions on abusive endpoints, admin login throttling, and country-based blocking for admin access.

12. Children’s Privacy

This Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights regarding your data, please contact us using the contact form on the main page.

For deletion or access requests, include the relevant tracking code, submitted email address, or any other detail needed to identify the record. We cannot delete or disclose data if we cannot reliably identify the relevant submission.

← Back to Home