Privacy Policy

Last updated: 23 March 2026

This policy describes how SongCast ("we", "us") handles personal data when you use our website, application, and related services (the "Service"). It is intended to align with the EU General Data Protection Regulation (GDPR).

1. Data controller

The controller responsible for processing personal data in connection with the Service is SongCast.

Contact: songcastxyz@gmail.com

For legal entity details and postal address, see our Impressum.

2. Categories of personal data

Depending on how you use the Service, we may process:

Account and authentication data — e.g. identifiers from login providers (such as email or social login), session tokens, and profile information you choose to share.
Wallet and on-chain data — public blockchain addresses and transaction metadata visible on public networks. We never ask you to share private keys or seed phrases.
Usage data — e.g. IP address, device/browser type, timestamps, pages or features used, and diagnostic logs needed to operate and secure the Service.
Communication data — content you send when you contact support or communicate with us.
Third-party integrations — where you connect services (e.g. music or identity providers), we may receive data according to your consent and their terms.

3. Purposes and legal bases (GDPR Art. 6)

Contract / pre-contract — providing the Service you request (Art. 6(1)(b) GDPR).
Legitimate interests — security, fraud prevention, analytics, and improvement of the Service, where not overridden by your rights (Art. 6(1)(f) GDPR).
Legal obligation — compliance with applicable law (Art. 6(1)(c) GDPR).
Consent — where required, e.g. certain cookies or marketing (Art. 6(1)(a) GDPR); you may withdraw consent at any time.

4. Recipients and processors

We use infrastructure and service providers (e.g. hosting, authentication, analytics, payment or on-ramp partners) who process data on our behalf under appropriate agreements. Some providers may be located outside the EEA; where required, we rely on appropriate safeguards (e.g. EU Standard Contractual Clauses).

Blockchain transactions are public by design; data published on-chain is not controlled by us and may be permanently visible.

5. Storage and retention

We retain personal data only as long as necessary for the purposes above, unless a longer period is required by law. Criteria include the nature of the data, legal obligations, and whether retention is needed to resolve disputes or enforce agreements.

6. Your rights

Subject to applicable law, you may have the right to:

Access your personal data (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure ("right to be forgotten") (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing based on legitimate interests (Art. 21 GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, contact us at songcastxyz@gmail.com.

7. Security

We implement appropriate technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure; you are responsible for safeguarding your wallet credentials and devices.

8. Children

The Service is not directed at children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal data from children.

9. Changes

We may update this Privacy Policy from time to time. The "Last updated" date will change accordingly. Continued use of the Service after changes constitutes acceptance where permitted by law.