Privacy
Privacy notice
NOTW is operated by Gordie Feery. Contact: gordiefeery@gmail.com.
What we collect
| Data | Why |
|---|---|
| Your email address, an account id, and the name and picture on your Google account, from Google sign-in | To let you sign in and to limit votes and submissions to one account per email. Never shown publicly. Google also passes your name and profile picture, which our sign-in provider stores with your account. NOTW never displays them. |
| Your votes (which tracks, when) | To count votes, enforce the limits and spot abuse. Totals are public. Who voted for what is not. |
| Your submissions (link, title, artist, subgenre, optional display name, “artist or label” tick) | To run the chart. Approved tracks and the display name you choose are public. |
| Reports (track, link, reason, optional contact email, time, moderation decision) | To review problems and takedown requests. A one-way hash of your IP address is kept briefly to rate-limit reports. |
| Essential session cookies | To keep you signed in. See below. |
We use Vercel Web Analytics, which collects anonymous, cookieless page view data (no personal identifiers). No advertising trackers or third-party scripts are used.
Cookies
NOTW uses only essential cookies, so there is no cookie banner.
| Cookie | Purpose | Duration |
|---|---|---|
sb-…-auth-token (may be split into .0, .1) | Your signed-in session. Only set after you sign in. | Until you sign out or the session expires |
sb-…-auth-token-code-verifier | Security check during Google sign-in (PKCE). Removed once sign-in completes. | Minutes |
Who processes data for us
- Supabase: database and sign-in. Data is stored in the EU (Ireland, eu-west-1).
- Vercel: website hosting and Web Analytics (anonymous, cookieless page views).
- Google: sign-in provider. Google tells us your email address when you sign in.
- Odesli (song.link): when enabled, we send submitted track links, and nothing about you, to find the same recording on other services.
- Apple (iTunes Search) and Deezer: we send a submitted track’s title and artist only, to find the same recording on Apple Music and Deezer. Nothing about you is sent.
- Resend: will send sign-in emails if email sign-in is added later. Not used yet.
When you open a listening or search link from Listen, you leave NOTW for that platform (Spotify, SoundCloud, YouTube, Bandcamp or Apple Music), whose own privacy policy applies.
How long we keep it
- Account data: until you delete your account, or after 24 months without signing in.
- Individual votes: deleted 12 months after the round closes. Final weekly results (track, artist, display name, vote total) are kept permanently as a public archive.
- Rejected submissions: deleted 90 days after the decision.
- Reports: kept for 12 months after the moderation decision.
- Rate-limit records: deleted after about a day.
These deletions run automatically every day.
Your rights
You can ask for a copy of your data, a correction, or deletion of your account by emailing gordiefeery@gmail.com. Deleting your account removes your email and votes. Approved tracks you submitted stay listed without any link to you. You can also complain to your data protection authority (in Ireland, the Data Protection Commission).
See also the rules and report or takedown page.