1. Who We Are
ZeroOne Beats ("we", "us") operates the free song submission system at zeroonebeats.com/submit and the paid ZOB Premium subscription. This policy explains what personal data we collect across both services, why, and what your rights are.
2. Data We Collect
| Data | Source | Purpose | Lawful Basis |
|---|---|---|---|
| OAuth display name | Your chosen sign-in provider (Twitch, Google, or Discord) | Shown to you as confirmation of who you're signed in as | Legitimate interest |
| OAuth provider & user ID | Your chosen sign-in provider | Identity verification; enforcing the 3-submissions-per-24h rate limit | Legitimate interest |
| Artist name, song title, track link, artist profile URL | You (submission form) | Processing and storing your music submission | Contractual necessity (you choose to submit) |
| IP address (hashed, non-reversible) | Your browser / network | Abuse and fraud prevention | Legitimate interest |
| Submission timestamp | Server | Record-keeping | Legitimate interest |
IP addresses are immediately and irreversibly hashed before storage using HMAC-SHA256. We never store your raw IP address.
3. Cloudflare Turnstile (CAPTCHA)
The submission form uses Cloudflare Turnstile to prevent automated abuse. Cloudflare may process your IP address and browser signals to determine whether you are human. This is governed by Cloudflare's Privacy Policy.
4. Session Cookies
When you sign in, we set a session cookie to keep you authenticated during your visit. This cookie:
- Is HttpOnly (not accessible by JavaScript)
- Is Secure (only transmitted over HTTPS)
- Expires after 24 hours
- Contains only a random session identifier - no personal data
5. Data Retention
Submission files (WAV and metadata JSON) are retained for as long as they are relevant to our playlist management. We do not have a fixed automatic deletion schedule. You may request deletion at any time (see Section 7).
Session data is deleted automatically after 24 hours.
6. Third-Party OAuth Providers
We use Twitch, Google, and Discord for authentication only. We do not receive your password, email address, or any data beyond your display name and user ID. Each provider's own privacy policy governs how they handle your data during the sign-in process.
7. Your Rights (GDPR)
If you are located in the European Economic Area or United Kingdom, you have the right to:
- Access - request a copy of the personal data we hold about you
- Rectification - request correction of inaccurate data
- Erasure - request deletion of your submission and associated data
- Restriction - request that we limit processing of your data
- Objection - object to processing based on legitimate interest
To exercise any of these rights, get in touch via the Contact page (choose "Privacy / GDPR data request" as the topic). We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority.
8. Payment Processing (ZOB Premium)
If you subscribe to ZOB Premium, payment is processed by Lemon Squeezy (Lemon Squeezy, LLC), which acts as the merchant of record. We do not collect or store your payment card details. Lemon Squeezy shares the following information with us about each subscriber:
- The e-mail address you used to subscribe
- Your country of residence (for tax compliance)
- Your subscription status, renewal dates, and any cancellation
We use this information solely to provide and support your subscription. Lemon Squeezy's own handling of your payment data is governed by its Privacy Policy.
9. Contact Form (Web3Forms)
If you message us through the Contact page, your submission is processed by Web3Forms, which receives your name, email address, message, and the topic you selected, and forwards them to our inbox. We do not store your message on this website. Web3Forms may keep operational logs in accordance with its own Privacy Policy. If you prefer not to use a third-party processor, you can email us directly using any of the aliases referenced from the Contact page.
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.