Privacy Policy

Last updated: 4/17/2026

1. Introduction

Song Bottle ("the Service") provides an exchange experience between strangers through music URLs. This Privacy Policy explains how we handle personal information in the Service.

2. Information We Collect

2.1 Information You Provide

  • Music service URLs (YouTube, Spotify, Apple Music, SoundCloud)
  • Song title and artist name (optional)
  • Mood tags (1-2 selections)
  • Short message (optional, max 20 characters)

2.2 Automatically Collected Information

  • Client hash: For rate limiting, we generate a one-way hash combining IP address and User-Agent. The original IP address is never stored.
  • Submission timestamp
  • Matching timestamp

3. How We Use Information

  • Providing the music exchange service
  • Matching users with each other
  • Preventing spam and abuse (rate limiting)
  • Improving and analyzing the service

4. Information Storage and Sharing

4.1 Data Storage

  • Exchange information is stored in Cloudflare D1 database
  • Waiting entries are stored for up to 7 days, then automatically deleted
  • Completed exchanges are stored indefinitely but can be deleted upon request

4.2 Information Sharing

The following information is shared with your matched partner:

  • Music URL
  • Song information (if provided)
  • Mood tags
  • Message (if provided)

Never shared: IP addresses, client hashes, or other identifying information

5. Cookies and Local Storage

The Service uses browser local storage for:

  • Storing language preferences
  • Storing exchange history (local only, never sent to servers)
  • Tracking first visit (for ad display control)

This information is stored only in your browser and never sent to our servers.

6. Third-Party Services

6.1 Music Services

The Service handles URLs from external music services (YouTube, Spotify, Apple Music, SoundCloud). When using these services, their respective privacy policies apply.

6.2 Advertising (Website)

The Service's website uses BuySellAds for ad delivery. BuySellAds may collect your information for this purpose. See BuySellAds' Privacy Policy for details.

6.3 Mobile App Advertising (Google AdMob)

The Song Bottle mobile app uses Google AdMob for ad delivery. AdMob may collect the following information to serve personalized ads:

  • Device advertising identifier (IDFA / GAID)
  • IP address (for ad delivery and fraud prevention)
  • Device information (OS, model, screen size, etc.)
  • App usage data

You can opt out of personalized advertising through your device settings:

  • iOS: Settings > Privacy & Security > Tracking
  • Android: Settings > Google > Ads > Reset or delete advertising ID

For more information, see Google's Privacy Policy and AdMob data disclosure.

6.4 Infrastructure

The Service uses Cloudflare Pages, Workers, and D1. See Cloudflare's Privacy Policy for details.

7. Data Security

  • All communications are encrypted with HTTPS (SSL/TLS)
  • IP addresses are one-way hashed, original values are never stored
  • URL validation prevents malicious link submissions

8. Your Rights

You have the right to:

  • Access your submitted information
  • Request deletion of your information
  • Stop using the Service at any time

To exercise these rights, please contact us at the address provided in the Legal Notice.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Advertising Service - Privacy Information

10.1 Information We Collect

For the advertising service, we collect the following information:

  • Artist name
  • Bio/description
  • Profile image URL
  • Featured song information (title, URL)
  • Social media links (optional)
  • Contact email address
  • Your name (optional)

10.2 How We Use This Information

  • Displaying advertisements
  • Conducting advertisement reviews
  • Payment-related communications
  • Sending performance reports

10.3 Data Retention

Advertisement data is retained for the following periods:

  • During active campaign: Indefinitely
  • After campaign completion: Minimum 1 year (for accounting and tax records)

10.4 Third-Party Services

We use the following third-party services:

  • PayPal: Payment processing
  • Resend (email service): Sending review results and payment instructions

11. Policy Changes

This Privacy Policy may be updated without notice. For significant changes, we will update the "Last updated" date at the top of this page.

12. Contact

For questions about this Privacy Policy, please contact us at the address provided in the Legal Notice.