Privacy Policy

Who is responsible

The controller for this website is FLX LLC, 1021 E Lincolnway, Suite #7652, Cheyenne, WY 82001, USA. soundlib.io is a brand of FLX LLC.

For anything about your data, write to hello@soundlib.io. We have not appointed a data protection officer, because fewer than twenty people are permanently engaged in processing personal data.

No analytics, no cookies without your consent

This site runs no analytics. Unless you accept advertising measurement (next section), it sets no cookies and loads no third-party trackers. Fonts are served from our own domain, so your browser does not contact Google or any font service.

Your light/dark mode setting and your privacy choice (Accept or Decline) are saved in your browser's local storage on your device only. Neither is sent to us. Storing your privacy choice is necessary to respect it; you can clear both at any time in your browser settings.

Advertising measurement (Meta Pixel), only with your consent

We advertise on Facebook and Instagram. To learn which ads bring people who actually ask for a valuation, we use the Meta Pixel, but only after you click Accept in the banner. Until then it is not loaded and nothing is sent.

Recipient: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland, and Meta Platforms, Inc., USA. What is sent: the pages you view, a "request sent" event when you send the valuation form (without any of its contents: no name, email, artist, track titles, links or message), and the technical data your browser sends with it, such as IP address, device and browser details. Meta sets cookies such as _fbp to recognise your browser across visits.

When you send the valuation form, our server also reports that same "request sent" event to Meta (Meta Conversions API), so it is counted once even if a browser extension blocks the pixel. It carries the same random event ID, the page address, your IP address, your browser details and Meta's cookie identifiers (_fbp, _fbc), and none of the form's contents. We do this only if you accepted in the banner.

Meta uses this to measure and improve our ads and, as a separate controller, for its own purposes under its privacy policy (facebook.com/privacy/policy). For collecting and transmitting the data we and Meta are joint controllers (Art. 26 GDPR) under Meta's Controller Addendum.

Legal basis: your consent, Art. 6(1)(a) GDPR, and for accessing and storing information on your device § 25(1) TDDDG. You can withdraw consent at any time with effect for the future: click "Privacy choices" in the footer and choose Decline. We then tell the pixel to stop and send nothing further.

Meta Platforms, Inc. is certified under the EU–U.S. Data Privacy Framework, which covers transfers to the USA.

Visiting the site (hosting)

The site is hosted by Vercel Inc. (USA). When you open a page, Vercel processes technical data your browser sends automatically — IP address, date and time, page requested, browser and operating system — to deliver the page and protect the service against abuse.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). These logs are deleted automatically after a short period.

Valuation requests (contact form)

When you send the valuation form we receive: which rights you are considering selling, the artist or catalog name, the track titles, where the music performs (optional), the optional monthly-streams range or the optional range of how many videos use the track, any links you choose to add, your role, your name, email address, and your message (optional). The form also contains a hidden spam-protection field and measures how long it took to fill in; neither identifies you.

We use this only to review your music and reply with an assessment or offer. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and Art. 6(1)(f) GDPR (answering enquiries and keeping the form free of spam).

Your request is delivered to our team mailbox by email. Our email is provided by Namecheap, Inc. (Private Email, USA).

How long we keep your data

• Requests that do not lead to an agreement: deleted at the latest 6 months after our last contact.
• Requests that lead to an agreement: kept as part of the contract file for as long as commercial and tax retention rules require (usually 6 to 10 years).
• Hosting logs: deleted automatically after a short period.

Transfers outside the EU

FLX LLC, Vercel and Namecheap are based in the USA, so your data is processed there; if you accept advertising measurement, Meta may also process it in the USA. Where a provider is certified under the EU–U.S. Data Privacy Framework we rely on that adequacy decision; otherwise transfers are covered by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Write to hello@soundlib.io and a human will reply.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

If you live in California, you have comparable rights under the CCPA/CPRA. We do not sell personal information. We share it with Meta for advertising only with your consent, and you can withdraw that consent at any time under "Privacy choices" in the footer.

Do you have to give us your data?

No. But without your name, email and the artist and track titles we cannot assess your music or reply to you. You can also simply email hello@soundlib.io instead of using the form.

Changes

We update this policy when the site or the law changes. The current version is always on this page.