Privacy Policy

1. Overview

SugarSpin is a self hosted music player application whose library, listening history, and core playback run on your own hardware. Optional features such as artwork and lyrics lookup, software updates, purchases, and customer-configured remote access may contact the third-party services described below. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

2. What SugarSpin Does NOT Collect

Because SugarSpin runs locally on your own hardware, the vast majority of your data never leaves your network:

• Your music files are never uploaded, transmitted, or shared with any external server
• Your listening history, playlists, favorites, and playback data stay on your device
• Your library metadata (artist names, album titles, track information) remains local
• No analytics, telemetry, tracking pixels, or usage data are collected from the application
• No cookies are placed by SugarSpin on client browsers for tracking purposes
• No advertising data is collected or shared with third parties

3. What We Collect

We collect limited data only through our website and purchase process:

• Email address: If you sign up for launch notifications on our website, we store your email address for the sole purpose of notifying you when SugarSpin launches. We do not share, sell, or use this email for any other purpose.
• Purchase information: When you purchase a Pro or Gold license, our payment processor (Stripe) handles the transaction. We receive your email address and a transaction reference. We do not store credit card numbers, billing addresses, or other payment details on our servers.
• License activation data: When you activate or transfer a paid license, a verification may be performed using the license key and a randomly generated SugarSpin installation ID stored in the app's persistent data. SugarSpin does not use your MAC address, processor, memory, music data, or library contents for license identification.
• Basic website traffic information: The SugarSpin website records the page visited, referring page, browser user-agent, time on page, a random website session ID, and a shortened one-way hash of the visitor IP address so repeat visits can be counted without storing the raw IP. If Cloudflare supplies a country code in the request, that country code may also be recorded. The website does not send visitor IP addresses to an external geolocation provider and does not collect city or regional location.

4. Album Artwork Fetching

SugarSpin includes optional features that connect to MusicBrainz, an open music database. These include fetching missing album artwork and looking up metadata (artist names, album titles, genres, and release years) to fill in missing or incorrect details for an album when you ask. When you use these features, SugarSpin sends album and artist names to MusicBrainz to search for matches. No personal data, listening history, or account information is included in these requests. These features are entirely opt in and only run when you manually trigger them.

5. Third Party Services

• Stripe: Handles payment processing for Pro and Gold license purchases. Stripe's privacy policy applies to payment transactions: stripe.com/privacy
• MusicBrainz: Used for optional album artwork fetching and metadata lookups (artist, title, genre, year). MusicBrainz's privacy policy: musicbrainz.org
• Lyrics and metadata providers: Optional lyrics and metadata searches may send artist, album, and track names to the provider used for that request. No music files, listening history, or SugarSpin password are included.
• Docker Hub: Used to download SugarSpin and, when automatic updates are enabled, check for and retrieve new versions.
• Remote-access services: If you independently choose a service such as Tailscale, NetBird, or Cloudflare Tunnel, that provider's terms and privacy policy apply. SugarSpin does not detect, install, or manage those services.

6. Website Analytics

The website uses a small first-party traffic counter for aggregate page, referral, and visit reporting. It does not use advertising trackers, tracking pixels, or third-party geolocation lookups. These website measurements are separate from the SugarSpin application: the application does not send listening activity, library contents, playlists, favorites, or playback history to the website.

7. Data Retention

• Email addresses collected for launch notifications will be retained until the launch notification is sent, after which you may request removal
• Purchase records are retained as required by applicable tax and business laws
• Basic website traffic records are retained for operational and historical traffic reporting and do not contain raw visitor IP addresses
• All data stored within the SugarSpin application (playlists, favorites, settings) is stored locally on your hardware and is under your full control

8. Your Rights

You have the right to:

• Request deletion of your email address from our notification list at any time
• Request information about what data we hold about you
• Delete all local SugarSpin data at any time by removing the application and its data folder from your device

To exercise any of these rights, contact us at support@hotdang.studio.

9. Children's Privacy

SugarSpin does not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of SugarSpin after changes are posted constitutes acceptance of the revised policy.

11. Contact

If you have questions about this privacy policy or how your data is handled, contact us at support@hotdang.studio.