§01 Data Controller Information
The Data Controller responsible for processing your personal data on BitwareTunes is:
BitwareTunes (A BitwareLabs Imprint)
Skåne, Sweden
Data Protection Inbox: legal@bitwaretunes.com
General Communications: hello@bitwaretunes.com
§02 Personal Data We Collect & Why
We collect only the minimum personal data required to provide lossless audio streaming, user account synchronization, and release newsletters:
-
Web Player Accounts (
bitwaretunes.com/music): When you create an account to save playlists and like tracks, we process your email address, a salted and hashed password representation, and cryptographic session tokens. We never store plaintext passwords. - Listening Telemetry & Library Data: We record track play counts, your playlist track associations, and liked tracks solely to display your personalized library inside The Player.
- The BitwareTunes Dispatch Newsletter: When you subscribe to our monthly intelligence bulletin, we store your email address, signup source, confirmation status, and a unique cryptographic one-click unsubscribe token.
- Security & Infrastructure Server Logs: When connecting to our web servers, transient access logs record your IP address, timestamp, HTTP request method, and user-agent. These logs are used strictly for rate-limiting, DDoS mitigation, and brute-force prevention, and are automatically rotated and purged.
§03 Legal Bases for Processing (GDPR Article 6)
Under the EU General Data Protection Regulation (Regulation (EU) 2016/679), all data processing is anchored in defined legal bases:
- Performance of a Contract (Art. 6(1)(b) GDPR): Processing your credentials, session tokens, and playlist data is necessary to deliver the streaming player service you requested.
- Consent (Art. 6(1)(a) GDPR): Delivery of The BitwareTunes Dispatch newsletter is based on your explicit consent, which you may revoke at any time via the one-click unsubscribe link.
- Legitimate Interests (Art. 6(1)(f) GDPR): Network rate-limiting and firewall IP monitoring protect our sovereign infrastructure and streaming endpoints from malicious scraping and unauthorized attacks.
§04 Cookie & Local Storage Statement
BitwareTunes adheres to the ePrivacy Directive and the Swedish Electronic Communications Act (LEK). We do not use tracking cookies, retargeting pixels, or behavioral profiling tools.
We use strictly functional, essential cookies and browser localStorage items required for the player to function:
| Key / Cookie | Type | Duration | Purpose |
|---|---|---|---|
session_token |
HTTP-Only Cookie | 30 Days | Secure authentication session token for logged-in users on The Player. |
bwt_volume |
localStorage | Persistent | Preserves your chosen volume level between track plays and visits. |
bwt_queue |
localStorage | Session | Holds the current album playback queue in your local browser memory. |
bwt_repeat_mode |
localStorage | Persistent | Remembers whether track repeat or shuffle is activated. |
Because we only employ strictly necessary technical storage to provide requested functionality, an intrusive, tracking-consent cookie pop-up banner is legally not required under EU guidelines.
§05 Zero Third-Party Tracking & Data Sharing
We take an uncompromising stance on digital sovereignty:
• We do not embed Google Analytics, Facebook/Meta Pixels, TikTok Pixels, or third-party ad networks.
• We do not sell, rent, or trade subscriber or listener data to third parties under any circumstance.
• Outbound newsletter mail is relayed directly through our self-hosted, DKIM-signed Postfix mail transfer agent.
§06 Data Retention & Erasure
We retain personal data only for as long as your account remains active or as required by Swedish statutory accounting standards:
• Account Purge: When an account is deleted, your user profile, liked tracks, and custom playlist mappings are immediately and irreversibly erased from our active PostgreSQL database.
• Newsletter Unsubscribe: Clicking the one-click unsubscribe link marks your record as unsubscribed immediately, preventing any further mail dispatches.
§07 Your Rights Under GDPR (Articles 15–22)
As an individual within the European Union (or globally using our service), you possess enforceable data rights:
- Right of Access (Art. 15): You have the right to request a complete copy of the personal data we hold about you.
- Right to Rectification (Art. 16): You may request correction of inaccurate or outdated email addresses or profile information.
- Right to Erasure / Right to be Forgotten (Art. 17): You may demand total deletion of your account and associated library data.
- Right to Data Portability (Art. 20): You may request your playlist and library data in a structured, machine-readable JSON format.
- Right to Object (Art. 21): You may object at any time to receiving our newsletter bulletin.
To exercise any of these statutory rights, email our data team at legal@bitwaretunes.com. We respond to all verified requests within 30 calendar days at zero cost to you.
§08 Supervisory Authority in Sweden
If you believe our processing of your personal data violates the GDPR or applicable Swedish privacy laws, you have the right to file a formal complaint with Sweden's national supervisory authority:
Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
Website: www.imy.se · Email: imy@imy.se
§09 Contact Us
General inquiries: hello@bitwaretunes.com
Postal address: BitwareLabs / BitwareTunes, Skåne, Sweden.