Privacy Policy

This Privacy Policy describes the privacy practices that apply to the Mixtape website and related online services operated by Annapurna Productions, LLC (“Annapurna,” “we,” “our,” or “us”) (the “Service”). This Privacy Policy explains what information we may collect, how we use it, how we protect it, and the choices you may have about our collection and use of information.

The practices described here apply only to information gathered online through the Service. They do not apply to information you may provide offline or to websites, platforms, or services operated by third parties. By using the Service, you accept the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information we collect from you

We may collect two general types of information from users of the Service:

• Information that identifies you, such as an email address, username, display name, or other information you provide that can reasonably be linked to you.
• Information that relates to your use of the Service or your device but does not, on its own, directly identify you, such as browser type, page path, timestamps, and usage events.

Account information. If you create an account, we may process information you provide, such as your email address, username, display name, and authentication information. Authentication is provided through Supabase, which helps us operate accounts, sessions, and security.

Content you provide. When you create or publish a mixtape, we store the content and settings you provide, such as a mixtape title, display name, track references, YouTube video IDs, J-card styling, decorations, stickers, and related metadata. We use this information so the Service can create, display, save, and share your mixtape.

Interactions. We may store interactions such as saving mixtapes to a collection, reporting a mixtape, moderation-related activity, and similar Service-supported actions.

Technical and log information. Like most online services, our hosting, database, authentication, and infrastructure providers may process technical information such as IP address, browser and device type, referring page, requested URL, and timestamps in server logs for security, reliability, debugging, and fraud prevention.

First-party analytics. Where permitted, we collect limited analytics events in our own systems after you opt in through our cookie banner. These events may include page views, creation steps, playback interactions, sign-in events, a random session identifier stored in your browser, page path, and non-sensitive product metadata generated through normal use. We do not use third-party advertising cookies for this analytics implementation.

Use of cookies and other tracking technologies

Like many websites, the Service uses cookies and similar technologies, including local storage, to remember preferences, support account sessions, preserve in-progress drafts, and understand how the Service is used when analytics consent has been provided. If you delete cookies or set your browser to decline them, some features of the Service may not work as designed.

We use these technologies for the following purposes:

• To keep you signed in securely and operate account features;
• To remember your cookie-consent choice and other local preferences;
• To store in-progress creation state locally in your browser;
• To record first-party analytics events after you choose to accept analytics through the cookie banner.

We do not use third-party advertising cookies, cross-site advertising identifiers, or mobile advertising IDs as part of the Service’s current analytics implementation.

2. How we use the information we collect

We use information to:

• Provide, operate, and improve the Service;
• Create, display, save, and share mixtapes at your direction;
• Authenticate users and maintain account security;
• Preserve drafts and preferences where supported by the Service;
• Maintain security, prevent abuse, investigate misuse, and enforce our Terms of Use;
• Respond to moderation reports, user requests, and support needs;
• Understand aggregate product usage after analytics consent has been provided;
• Comply with law and protect our rights, users, and the public.

Legal bases for processing, where applicable

Depending on your region, we may rely on one or more legal bases to process personal information, including performing our agreement with you, our legitimate interests in operating and securing the Service, complying with legal obligations, and consent where required, such as for optional analytics cookies or similar technologies.

3. How we share your information

We may share information with vendors, agents, service providers, and affiliated entities that help us provide the Service. These providers may process information on our behalf for hosting, authentication, database services, storage, analytics, security, debugging, moderation, and other operational purposes. Our primary providers include Supabase for database, authentication, and storage services, and Vercel for application hosting.

The Service may embed or link to third-party content and platforms, including YouTube for playback. Those third parties have their own privacy practices, terms, and controls. This Privacy Policy does not cover information collected by third-party services.

We may disclose information if we believe disclosure is permitted or required by law, including to respond to legal process or requests from government, regulatory, law enforcement, or public authorities. We may also disclose information to protect our legal rights, copyrights, privacy, safety, security, property, users, Service, affiliates, employees, contractors, and the public; to protect against fraud or illegal activity; to enforce our terms; or as part of a sale, merger, financing, restructuring, or transfer of all or part of our business or assets.

4. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you are under 13, you may not send information about yourself through the Service. If we learn that we have collected personal information from a child under 13, we will use commercially reasonable efforts to delete it.

Minors under 18, or their parent or legal guardian, may request removal of information the minor posted or provided through the Service by contacting us using the information below. We may retain information where required or permitted by law.

5. How we protect your information and how long we keep it

We use commercially reasonable methods designed to protect information we collect, access, process, or disclose. However, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, prevent abuse, enforce agreements, and protect our rights. Following account termination or deactivation, we and our service providers may retain certain information for a commercially reasonable time for backup, archival, audit, legal, security, or operational purposes. Analytics events may be retained in aggregated or de-identified form for longer than raw event logs where appropriate.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, to request data portability, or to withdraw consent where processing is based on consent. These rights do not apply in all circumstances. If you submit a request, we will explain whether the right applies and how we can respond.

Your choices include:

• Accessing or updating certain account information through the Service where available;
• Deleting account or published content where the Service provides controls to do so;
• Choosing “Essential only” in the cookie banner to decline optional analytics;
• Clearing cookies, local storage, or other site data through your browser settings;
• Contacting us to submit a privacy request as required by applicable law.

We may need to retain certain information for legal, security, recordkeeping, or operational reasons, and residual copies may remain in backups or archives for a limited period.

7. Links to other sites and services

The Service may contain links to third-party websites, services, platforms, or online content that are not operated by Annapurna. If you click a third-party link or use embedded third-party content, you may leave the Service or interact directly with that third party. We are not responsible for the privacy practices, policies, or content of third-party services.

8. Important information for California residents

California law may provide California residents with rights to know, access, correct, delete, and receive information about certain personal information we collect, use, disclose, or share, as well as the right not to be discriminated against for exercising those rights.

We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined under California privacy law. In the past 12 months, the categories of personal information we may have collected include identifiers, internet or other electronic network activity information, user-generated content, and approximate location information derived from IP address. The categories of recipients to whom we disclose personal information are described in the “How we share your information” section above.

To submit a California privacy request, please contact us using the information below. We may need to verify your request before responding.

9. Do Not Track

Some web browsers transmit “Do Not Track” signals. Because there is not yet a common industry or legal standard for responding to these signals, the Service does not currently respond to them. You can use the cookie banner and your browser settings to control cookies and similar technologies as described in this Privacy Policy and our Cookie Policy.

10. Updates to our Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in law, technology, or our practices. If we make material changes, we will provide notice in a way we consider appropriate, such as by posting a revised version on this page. You can determine when this Privacy Policy was last revised by referring to the “Last updated” date above. Continued use of the Service after changes become effective means you accept the updated policy.

11. Information for users outside the United States

If you use the Service outside the United States, you understand that we may collect, process, transfer, and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your state, province, or country.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws, including rights to request access, correction, erasure, restriction, objection, portability, and to lodge a complaint with a supervisory authority. Where required, transfers of personal information to a third country or international organization will be subject to appropriate safeguards.

12. Contact us

If you have questions about this Privacy Policy or wish to exercise privacy rights that may apply to you, please contact us at:

Annapurna Productions, LLC
812 N Robertson Blvd
West Hollywood, CA 90069

Email: privacy@annapurna.com