Privacy Policy

This Privacy Policy explains how TradeFile (“we”, “us”) collects, uses, and shares personal data when you use TradeFile (the “Service”). It covers two groups: artists who hold accounts, and fans who unlock downloads.

1. Data we collect

From artists (account holders)

• Account details: email address, display name, password (stored only as a salted hash).
• Optional profile details: username and bio.
• Content you create: gates, download links/files, artwork, and configured actions.

From fans (people unlocking a gate)

• Email address, if the artist enabled email collection on that gate.
• IP address and basic request data, used for analytics counts and abuse prevention.
• Aggregate interaction counts (gate views and per-action opens), used for analytics.

2. How we use data

• To provide and operate the Service (authenticate accounts, serve gated downloads).
• To generate analytics for artists (views, unlocks, conversion, drop-off).
• To prevent abuse, fraud, and spam (e.g. rate limiting by IP).
• To communicate with you about your account and the Service.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract (providing the Service), our legitimate interests (security, analytics, and improving the Service), and consent where required. For fan email collection, the artist is the controller and is responsible for the lawful basis and any required consent; we act as a processor on the artist’s behalf.

4. How we share data

• With artists: when a fan unlocks a gate that collects email, that email and unlock timestamp are made available to the artist who owns the gate.
• Service providers: infrastructure we use to host and run the Service (e.g. Hetzner Cloud), acting under our instructions.
• Legal: where required by law or to protect rights, safety, and the integrity of the Service.

We do not sell personal data.

5. Cookies

We use a single strictly-necessary cookie to keep you signed in (a session token). It is required for the Service to function and is not used for advertising or cross-site tracking. If we introduce analytics or marketing cookies in the future, we will update this Policy and request consent where required.

6. Retention

We keep account data for as long as your account is active, and gate and unlock data for as long as the gate exists. When you delete a gate, its associated files and unlock records are removed. You can delete your account by contacting [email protected].

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. To exercise these rights, contact [email protected]. Fans whose email was collected by an artist should contact that artist directly; we will assist the artist in honoring such requests.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes & contact

We may update this Policy from time to time; the “Last updated” date above reflects the latest version. Questions or requests? Contact [email protected].