Legal
Privacy Policy
Last updated: July 23, 2026
Songwriters Island (“we,” “us,” the “Service”) operates the website songwritersisland.com and the Songwriters Island mobile app. This policy explains what information we collect, how we use it, and the choices you have. We keep it plain-spoken on purpose.
Songwriters Island is the party responsible for your information (the “data controller”). You can reach us any time through our contact page.
Information we collect
Account information. When you create an account we collect your first and last name and your email address. Your name is shown as your display name, which you can change later. You also choose a password — passwords are stored securely (hashed) by our authentication provider, Supabase, and are never visible to us. Artists may add a bio, photo, location, genres, and social links.
Purchases. When you buy a ticket we record the event, quantity, and your purchase history so we can honor your tickets and check you in. Card payments are handled by Stripe — we never see or store your full card number.
Content you create. Artists you favorite, comments you post, event photos you upload, songs and stories artists submit, and messages you send us through the contact or feedback forms.
Usage data.Basic, aggregated analytics about which pages are viewed, to understand what's useful. We also store small preferences (like your radio volume and whether the radio was playing) on your device.
How we use your information
- To run the Service — your account, tickets, favorites, and the radio.
- To send you transactional email you'd expect: a welcome message, ticket confirmations, and artist notifications.
- To send our newsletter and event announcements ifyou've subscribed — every one has an unsubscribe link.
- To keep the Service secure and prevent abuse.
We do not sell your personal information, and we do not use advertising trackers or share your data with advertisers.
Service providers we rely on
We use a small set of trusted providers to operate the Service. They process data on our behalf:
- Supabase — our database, and our authentication provider. Supabase processes your login credentials, password resets, and sign-in and session records on our behalf. Your password is stored hashed and is not readable by Songwriters Island.
- Stripe — payment processing for tickets (they handle your card details directly).
- Resend — sending our email.
- Vercel — hosting and privacy-friendly, aggregated analytics.
- Cloudflare Turnstile — bot protection on our forms.
- AzuraCast — the radio stream.
Cookies & local storage
We use cookies strictly to keep you signed in and to remember your preferences. Signing in stores a session token (set by our authentication provider, Supabase) in a cookie so you stay logged in between visits; signing out or deleting your account clears it. We do not use advertising or cross-site tracking cookies.
Your choices & rights
- Access or correct your profile anytime from your account settings.
- Unsubscribe from marketing email using the link in any newsletter, or the unsubscribe page.
- Delete your account and data — you can permanently delete your own account any time, right from your account settings (no need to email us). Deleting your account removes your profile, your uploaded files, your comments, favorites, RSVPs, and newsletter subscription, and signs you out everywhere. Some records may be retained where required (e.g. transaction records held by our payment processor for tax/accounting).
To make any of these requests, contact us at songwritersisland.com/contact.
Where your information is processed
Songwriters Island is based in the United States, and the providers we rely on (listed above) store and process data on servers in the United States. If you use the Service from outside the U.S. — including from Mexico, the Caribbean, or elsewhere we host events — your information is transferred to and processed in the United States, which may have different data-protection laws than your home country. By using the Service you understand your information is handled as described here.
Your rights depending on where you live
Everyone who uses Songwriters Island can access and correct their profile, unsubscribe from marketing, and delete their account and data (see above) — we extend those choices to all users, wherever you are.
Depending on where you live, you may have additional rights under laws like the EU/UK GDPR or U.S. state privacy laws (for example, to access, correct, delete, or port your data, or to object to certain processing). To exercise any of these, contact us through the contact page and we'll respond as required by the law that applies to you. If you believe we haven't handled your information properly, you also have the right to complain to your local data-protection authority.
How long we keep things
As a rule, we keep information for as long as your account is active, and delete or de-identify it when it's no longer needed. Here's what that means in practice:
| Data | How long we keep it |
|---|---|
| Your account (profile, name, email) | Until you delete your account. Deleting it removes your profile and the content tied to it (below). |
| Your uploaded files (avatar, song audio & artwork, event photos) | Until you remove them, or until you delete your account — deleting your account also deletes your uploaded files from our storage. |
| Comments, favorites, and RSVPs | Until you delete them or delete your account, whichever comes first. |
| Unapproved event photos | Automatically deleted 30 days after upload if not approved. |
| Artist applications | Kept while we consider and manage the roster, including entries we didn't move forward, so we don't re-contact you by mistake. Ask us to remove yours any time. |
| Contact & feedback messages | Kept so we can follow up and keep a record of the conversation. Ask us to remove yours any time. |
| Newsletter subscription | Kept until you unsubscribe; unsubscribing marks you as opted-out (we keep a minimal record so we don't email you again). Ask us to fully remove you any time. |
| Artist invite codes | Expire 30 days after they're issued; the record is kept for our audit trail. |
| Payment records | We don't store your card details. Stripe, our payment processor, retains transaction records under its own policy (and tax/accounting law may require us to keep purchase records). |
| Sign-in, security & error logs | Our authentication provider (Supabase) keeps authentication logs under its policy; we keep operational and security logs for a limited time to run the Service and prevent abuse. |
| Backups | Our providers (Supabase) keep automated backups on a rolling schedule; deleted data ages out of backups over time. |
You can ask us to delete information about you at any time through the contact page, and we may keep the minimum required to comply with our legal obligations (for example, tax records).
Security
Data is transmitted over encrypted (HTTPS) connections, and access to it is limited to what's needed to run Songwriters Island. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.
Changes to this policy
We may update this policy from time to time. When we do, we'll revise the “Last updated” date above. Material changes will be communicated through the Service.
Contact us
Questions about this policy or your data? Reach us any time at songwritersisland.com/contact.