YOUR DATA,
IN PLAIN SIGHT.

Who is responsible

The controller for this website is Rabbitune, Donaustraße 44, 12043 Berlin. For anything in this policy, write to rabbitune.app@gmail.com.

What we collect, and why

The song you pick. Sent to our recommendation service to generate your match. Necessary to perform the contract.
A signed browser identifier. Stored in a cookie so a checkout session, selected-song recovery, and your match wallet follow you between visits. Necessary to provide the service you asked for.
Your network address. Used transiently to rate-limit searches, checkout attempts, and waitlist submissions. A one-way hash is stored with the signed browser identifier. Legitimate interest in preventing abuse and runaway cost.
Your email address. Collected by Stripe at checkout, or given by you to restore a wallet or join the app waitlist. Used to credit and recover your matches and, for the waitlist, to provide a one-time promotional match and tell you once when the app is ready. Contract, and consent for the waitlist.
Product events. Coarse counts such as “a search happened” or “a checkout completed”, tied to the browser identifier. Legitimate interest in understanding whether the product works. No advertising or cross-site tracking.

Who else processes it

Stripe handles payment and tax; we never receive your card number. Resend sends the restore and waitlist emails. Spotify supplies song search results, Google Gemini generates the match, and TMDB supplies movie data and streaming availability. Our servers and database are hosted in the EU. Where a provider processes data outside the EU, that transfer relies on the European Commission’s standard contractual clauses.

How long we keep it

Visitor records and hashed IPs: 12 months.
Wallets, match ledger and purchase records: kept while the wallet is usable, and for the period accounting law requires, generally 7 years from purchase.
Restore links: 15 minutes, then unusable.
Waitlist entries: until you ask to be removed, or until the app launches.
Product events: 24 months.

Cookies

Rabbitune sets two cookies: a signed visitor identifier and, after a purchase, a signed customer identifier. Both are strictly necessary to deliver checkout recovery and your matches, so no consent banner is required. There are no advertising or analytics cookies. Clearing them hides a paid wallet until you restore it by email.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable form. Email rabbitune.app@gmail.com from the address you used and we will respond within one month. Deleting a wallet with unused matches forfeits them, and we will say so before acting. You can also complain to the data protection authority where you live.

We do not sell personal data or use it for advertising.

Read the terms and refund policy.