Deadwax is an app for logging, rating and reviewing music. It’s made by Maximilien Mills, an independent developer in the UK, who is responsible for your data (the “data controller”). This page explains what Deadwax collects, why, who else is involved, and what you can do about it. In short: we collect what the app needs to work, we don’t sell your data, and there are no ads or tracking.

What we collect

If you just look around (guest)

You can browse without an account. Nothing about you is stored by us. To show charts, search results, artwork and news, the app asks the services listed under “Other services” directly, which means they see your device’s internet address and what you searched for.

If you create an account

• Account: your email address and password (stored scrambled, never readable), and the date you agreed to the community guidelines.

• Profile: your @username, display name, bio, profile photo, Top 4 and whether your profile is private.

• Your library: what you log, your ratings, reviews, likes, re-listens, moods, tags and dates, your lists, wantlist, vinyl collection, gigs and the artists you follow.

• Community: who you follow, reviews you like, people you block and anything you report (with the reason and note you give).

Crash and error reports

If the app crashes or something goes wrong, it sends a short report: the error message, the type of phone system (iOS or Android), the app version and, if you’re signed in, your account ID. Reports don’t include your library or messages, and are deleted after 30 days.

Location (record shop map)

If you allow it, your phone’s location is used on your phone to centre the map. To find record shops, the app sends the area shown on the map (not your exact position) to our server, which asks Google for shops in that area. We don’t store your location.

Connected services (optional)

• Last.fm: if you connect it, your password is turned into a one-way code on your phone and checked with Last.fm through our server; we never see or store the password. Your Last.fm username and access key are kept on your phone.

• Spotify import: you sign in to Spotify inside the app so it can read your saved albums once, to import them. The app can only read your saved albums, the access is used on your phone only, and it isn’t kept afterwards.

What other people can see

Deadwax is social. Unless your profile is private, other people (including people without an account) can see your @username, display name, bio, photo, Top 4, what you’ve logged and rated, your reviews and your public lists. Turn on Private profile in Settings and only your profile card (name, @username, photo) stays visible. People you block can’t see your profile, reviews or lists, and you can’t see theirs.

Why we use it

• To run your account and keep your library in sync across your devices (this is the service you signed up for).

• To show your profile, reviews and lists to others, as you choose.

• To keep the community safe: reports, blocks, word filters and limits on spam.

• To find and fix bugs, using crash reports.

We don’t use your data for advertising, we don’t sell it, and we don’t track you across other apps or websites.

Other services

These services help run Deadwax. Each only gets what it needs for its job:

• Supabase stores accounts, libraries, profiles and photos, on servers in the EU (Frankfurt), and sends the sign-up code email.

• Apple (iTunes and Apple Music charts) for music information, artwork, previews and charts.

• Deezer, Last.fm, Wikipedia, MusicBrainz and Discogs for charts, artist photos, similar artists, bios, barcodes and vinyl details.

• Google Places (through our server) for record shops, and OpenStreetMap as a backup.

• Ticketmaster (through our server) for upcoming gigs, using the artist’s name only.

• Music news from Pitchfork, the BBC, Stereogum, Rolling Stone and NME; opening an article takes you to their website.

How long we keep it

Your account and library are kept until you delete your account. Things you delete in the app disappear from your profile straight away and are erased completely when your account is deleted. Crash reports are kept for 30 days. Reports about content are kept as long as needed to deal with them and to stop repeat abuse.

Your rights

Under UK data protection law you can ask to see, correct, download or delete your data, or object to how it’s used.

• Delete your account: Settings → Account → Delete account. This removes your account and everything in it, including your photos.

• Download your data: Settings → Data & Backup → Export Backup (a file with your whole library).

• Correct it: edit your profile and library in the app at any time.

• Anything else: email hello@deadwaxapp.co.uk.

If you’re unhappy with how your data is handled, you can complain to the UK Information Commissioner’s Office (ico.org.uk).

Children

Deadwax isn’t meant for children under 13, and we don’t knowingly collect data from them. If you think a child under 13 has an account, email us and we’ll delete it.

Changes

If this policy changes, we’ll update this page and the date at the top. If a change matters, for example if Deadwax ever shows ads, we’ll tell you in the app first.

Contact

Maximilien Mills · hello@deadwaxapp.co.uk