Tapelog is a music production journal. This policy explains what personal information we collect, why we collect it, who we share it with, and what rights you have over it. We've written it to be direct rather than dense.
If you have questions, email us at info@tapelog.app.
Tapelog is operated by Dan Beirouty, based in Melbourne, Australia. We are the data controller for the personal information described in this policy.
| Data | Why we collect it |
|---|---|
| Email address | Account creation, login, and transactional emails (approvals, invitations, mentions) |
| Display name | Shown to collaborators on shared tracks |
| Profile photo (optional) | Shown alongside your entries in shared tracks |
| Track data — titles, status, genre, mood, instruments, BPM, key, notes, file paths, reference tracks | Core service: organising your music catalogue |
| Session notes and journal entries | Core service: recording what happened in each session |
| Next actions and version milestones | Core service: tracking progress on each track |
| Feedback messages (optional) | Improving the product; sent to our internal tools |
| Profile preferences — producer type, DAW | Personalising your experience |
We collect only what is needed to provide the service. We do not build advertising profiles or sell your data.
Anthropic processes this data under its own privacy policy and API terms. We send only the session notes and track title — no identifying information about you is included in that request.
We use the following third-party services to operate Tapelog. Each is a data processor acting on our behalf.
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, and file storage | Data stored in Sydney, Australia (ap-southeast-2). Supabase Inc is a US company. |
| Resend | Transactional email delivery | United States |
| Anthropic | AI-generated track recaps (only when triggered by you) | United States |
| Unsplash | Banner images shown on the home screen. No personal data is sent. | United States |
| Vercel | Web hosting and delivery | United States (edge network) |
We do not share your data with any other third parties, including advertisers or data brokers.
Your data is stored on Supabase infrastructure located in Sydney, Australia. Some processors listed above (Resend, Anthropic, Vercel) are based in the United States. When your data is transferred to these processors, it is subject to the legal protections in place in those jurisdictions.
If you are located in the European Economic Area or the United Kingdom, these transfers are made on the basis of standard contractual clauses or equivalent mechanisms as provided by each processor. You can request information about the specific safeguards in place by contacting us.
Tapelog stores data in your browser's local storage (not cookies) for the following purposes:
We do not use advertising cookies or third-party tracking scripts.
Depending on your location, you may have the following rights over your personal data:
Residents of the European Economic Area and the United Kingdom have these rights under the GDPR. Residents of California have rights under the CCPA/CPRA. Residents of Australia have rights under the Privacy Act 1988 (Cth).
To exercise any right, email info@tapelog.app. We will respond within 30 days.
Your data is stored in a database with row-level security enabled, meaning each user can only access their own records. Authentication is handled by Supabase Auth. Access to the service requires an approved account — Tapelog is invitation-only.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@tapelog.app.
Tapelog is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it.
If we make material changes to this policy, we will notify active users by email at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the most recent version.
For privacy-related questions, requests, or complaints:
If you are in Australia and are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner.
If you are in the EU or UK, you may lodge a complaint with your local data protection authority.