1. Who We Are
1.1ZeroOne Beats ("we", "us") operates the free song submission system at zeroonebeats.com/submit and the paid ZOB Premium subscription. This policy explains what personal data we collect across both services, why, and what your rights are.
2. Data We Collect
| Data | Source | Purpose | Lawful Basis |
|---|---|---|---|
| OAuth display name | Your chosen sign-in provider (Twitch, Google, or Discord) | Shown to you as confirmation of who you're signed in as | Legitimate interest |
| OAuth provider & user ID | Your chosen sign-in provider | Identity verification; enforcing the 3-submissions-per-24h rate limit | Legitimate interest |
| Artist name, song title, track link, artist profile URL | You (submission form) | Processing and storing your music submission | Contractual necessity (you choose to submit) |
| IP address (hashed, non-reversible) | Your browser / network | Abuse and fraud prevention | Legitimate interest |
| Submission timestamp | Server | Record-keeping | Legitimate interest |
2.1IP addresses are immediately and irreversibly hashed before storage using HMAC-SHA256. We never store your raw IP address.
3. Cloudflare Turnstile (CAPTCHA)
3.1The submission form uses Cloudflare Turnstile to prevent automated abuse. Cloudflare may process your IP address and browser signals to determine whether you are human. This is governed by Cloudflare's Privacy Policy.
4. Session Cookies
4.1When you sign in, we set a session cookie to keep you authenticated during your visit. This cookie:
- 4.2Is HttpOnly (not accessible by JavaScript)
- 4.3Is Secure (only transmitted over HTTPS)
- 4.4Expires after 24 hours
- 4.5Contains only a random session identifier - no personal data
5. Data Retention
5.1Submission files (WAV and metadata JSON) are retained for as long as they are relevant to our playlist management. We do not have a fixed automatic deletion schedule. You may request deletion at any time (see Section 7).
5.2Session data is deleted automatically after 24 hours.
6. Third-Party OAuth Providers
6.1We use Twitch, Google, and Discord for authentication only. We do not receive your password, email address, or any data beyond your display name and user ID. Each provider's own privacy policy governs how they handle your data during the sign-in process.
7. Your Rights (GDPR)
7.1If you are located in the European Economic Area or United Kingdom, you have the right to:
- 7.2Access - request a copy of the personal data we hold about you
- 7.3Rectification - request correction of inaccurate data
- 7.4Erasure - request deletion of your submission and associated data
- 7.5Restriction - request that we limit processing of your data
- 7.6Objection - object to processing based on legitimate interest
7.7To exercise any of these rights, get in touch via the Contact page (choose "Privacy / GDPR data request" as the topic). We will respond within 30 days.
7.8You also have the right to lodge a complaint with your local data protection authority.
8. Payment Processing (ZOB Premium)
8.1If you subscribe to ZOB Premium, payment is processed by Lemon Squeezy (Lemon Squeezy, LLC), which acts as the merchant of record. We do not collect or store your payment card details. Lemon Squeezy shares the following information with us about each subscriber:
- 8.2The e-mail address you used to subscribe
- 8.3Your country of residence (for tax compliance)
- 8.4Your subscription status, renewal dates, and any cancellation
8.5We use this information solely to provide and support your subscription. Lemon Squeezy's own handling of your payment data is governed by its Privacy Policy.
9. Contact Form (Web3Forms)
9.1If you message us through the Contact page, your submission is processed by Web3Forms, which receives your name, email address, message, and the topic you selected, and forwards them to our inbox. We do not store your message on this website. Web3Forms may keep operational logs in accordance with its own Privacy Policy. If you prefer not to use a third-party processor, you can email us directly using any of the aliases referenced from the Contact page.
10. Changes to This Policy
10.1We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.