This is a translation, provided so that you can read the text. The German version is the binding one and German law applies; where the two differ, the German wording governs. Read the German version
This skeleton lists the data the system actually processes — read off the code, not taken from a template. The legal text has to be built on it.
What we store when you place an order
- What you enter in the order form: the occasion, the name of the person the song is for, your relationship, the story, the mood you want and the language
- Your email address, so we can send you the finished song
- A hash of your IP address — not the address itself. It serves only to stop bulk ordering and cannot be turned back into anything that identifies you.
- The time of the order and of the confirmation
Who else gets to see the data
- Supabase — database location, data processing agreement
- Backblaze B2 — storage of the finished audio files location, data processing agreement
- Suno — generates the music; receives the lyrics and the style description data processing agreement, transfer to a third country
- OpenRouter — generates the lyrics; receives your story data processing agreement, transfer to a third country
- Stripe — payment processing data processing agreement
The one thing here that must not be overlooked: your personal story goes to an AI provider. That belongs stated outright, not hidden away in a list.
For how long
Set retention periods for each kind of data
Your rights
Access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with a supervisory authority.
Open: There is no way in the system yet to obtain access or have data deleted. That is not a matter of wording but a missing feature.
Cookies and analytics
This site currently sets no cookies for analytics and loads no external fonts or scripts. Fonts are served locally. Should that change, a consent mechanism has to be in place first.