YOUR DATA,
IN PLAIN SIGHT.

Who is responsible

The controller for this website is Rabbitune, Donaustraße 44, 12043 Berlin. For anything in this policy, write to rabbitune.app@gmail.com.

What we collect, and why

The song you pick. Sent to our recommendation service to generate your match. Necessary to perform the contract.
A signed browser identifier. Stored in a cookie so a checkout session, selected-song recovery, and your match wallet follow you between visits. Necessary to provide the service you asked for.
Your network address. Used transiently to rate-limit searches, checkout attempts, and waitlist submissions. A one-way hash is stored with the signed browser identifier. Legitimate interest in preventing abuse and runaway cost.
Your email address. Collected by Stripe at checkout, or given by you to restore a wallet, join the app waitlist, or contact us through the feedback form. Used to credit and recover your matches, manage the waitlist, acknowledge your message, and reply when useful. Contract and consent, depending on the action you choose.
Feedback messages. When you send feedback, a feature request, or a complaint, we store the category and message so we can review and respond to it. Raw submissions remain private. If an idea is approved for the public roadmap, we write a separate anonymized title and summary; your email and original message are never published.
Product events. Coarse counts such as “a search happened” or “a checkout completed”, tied to the browser identifier. Legitimate interest in understanding whether the product works. No advertising or cross-site tracking.

Who else processes it

Stripe handles payment and tax; we never receive your card number. Resend sends waitlist, feedback, and purchase emails. Spotify supplies song search results, Anthropic’s Claude generates the match, and TMDB supplies movie data and streaming availability. Our servers and database are hosted in the EU. Where a provider processes data outside the EU, that transfer relies on the European Commission’s standard contractual clauses.

How long we keep it

Visitor records and hashed IPs: 12 months.
Wallets, match ledger and purchase records: kept while the wallet is usable, and for the period accounting law requires, generally 7 years from purchase.
Waitlist entries: until you ask to be removed, or until the app launches.
Private feedback submissions: 24 months, then automatically deleted.
Anonymized public roadmap summaries: retained while they remain useful as a product record.
Product events: 24 months.

Cookies

Rabbitune sets two cookies: a signed visitor identifier and, after a purchase, a signed customer identifier. Both are strictly necessary to deliver checkout recovery and your matches, so no consent banner is required. There are no advertising or analytics cookies. Clearing them hides a paid wallet until you restore it in a browser with the checkout email address.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable form. Email rabbitune.app@gmail.com from the address you used and we will respond within one month. Deleting a wallet with unused matches forfeits them, and we will say so before acting. You can also complain to the data protection authority where you live.

We do not sell personal data or use it for advertising.

Read the terms and refund policy.