Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Music Metadata Finder ("we," "us," "the Service") collects, uses, stores, and protects information when you use our website and tools, including the Metadata Finder and Catalog Builder features.

1. Information We Collect

We collect only the information necessary to operate the Service, prevent abuse, and process payments. Specifically:

• Account information. If you sign in with Google, we receive your name, email address, and profile picture via Google OAuth, processed through our authentication provider, Supabase.
• Usage data. We log IP addresses and search counts to enforce free-tier daily limits and prevent abuse of the Service. This data is stored temporarily and is not used to build advertising profiles.
• Payment information. Subscription payments are processed entirely by Stripe, a third-party payment processor. We do not collect, view, or store your full credit card number, CVC, or other sensitive payment details. We retain only the subscription status, plan type, and Stripe customer/subscription identifiers necessary to manage your account.
• Music metadata. Track, album, and artist metadata retrieved through the Spotify Web API (track names, ISRCs, UPCs, release dates, copyright lines, cover art) is cached in our database to improve performance and reduce redundant API calls. This metadata is publicly available information from Spotify's catalog and is not personal information about you.
• Communications. If you contact us through our contact form, submissions are processed via Formspree, and we receive your name, email address, and message content.
• Analytics. We use Google Analytics and may use Google Ads conversion tracking to understand aggregate usage patterns and measure the effectiveness of our marketing. These tools may use cookies and similar technologies. See Section 5 for more detail.

2. How We Use Information

• To provide, operate, and maintain the Service.
• To authenticate your account and enforce plan-based usage limits (free and Pro tiers).
• To process subscription payments and manage billing through Stripe.
• To respond to support inquiries submitted through our contact form.
• To monitor, secure, and improve the performance and reliability of the Service.
• To measure and improve the effectiveness of our advertising, using aggregate and anonymized data where possible.

We do not use your personal information to train machine learning models, and we do not sell your personal information to data brokers or third-party advertisers.

3. Third-Party Services

The Service relies on the following third-party providers, each of which processes certain data under their own privacy policies:

• Spotify — source of music metadata via the Spotify Web API. Music Metadata Finder is not affiliated with, endorsed by, or officially connected to Spotify AB.
• Supabase — authentication, database hosting, and storage of account and cached metadata.
• Stripe — payment processing and subscription billing.
• Google — OAuth sign-in, Google Analytics, and Google Ads conversion tracking.
• Vercel — application hosting and server infrastructure.
• Formspree — processing of contact form submissions.

We do not control how these third parties process data beyond what we submit to them, and we encourage you to review their respective privacy policies.

4. Data Retention

We retain account information and cached metadata for as long as your account remains active or as needed to provide the Service. Metadata cached from Spotify's public catalog may be retained and periodically refreshed to keep the Service performant, independent of individual user accounts. You may request deletion of your account and associated personal information by contacting us (see Section 8); metadata that is publicly available on Spotify and cached for general Service performance (not tied to a specific identifiable user) may be retained as part of our shared catalog cache.

5. Cookies and Tracking Technologies

The Service uses cookies and similar technologies for authentication (via Supabase), analytics (via Google Analytics), and advertising conversion measurement (via Google Ads). You can control or disable cookies through your browser settings; doing so may affect your ability to remain signed in or use certain features.

6. Data Security

We take reasonable technical and organizational measures to protect your information, including relying on industry-standard infrastructure providers (Supabase, Stripe, Vercel) that maintain their own security practices. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Children's Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, or to request account or data deletion, contact us at the email below. We will respond within a reasonable timeframe and may need to verify your identity before fulfilling certain requests.

9. International Users

The Service is operated from Mexico and the United States and may transfer, store, and process your information in either country or wherever our service providers (Supabase, Stripe, Vercel, Google) maintain infrastructure. By using the Service, you consent to this transfer and processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

For any questions regarding this Privacy Policy or your personal information, please contact us at infomusicmetadatafinder@gmail.com.