Privacy policy

1. Who we are

ryser.id is operated by Ryser (Ryan Poser), Groenlingstraat 12, 1706 BL Heerhugowaard, the Netherlands (KVK 86346512, VAT NL004231102B27). ryser.id identifies the tracks in DJ sets and mixes. For anything related to your data, contact privacy@ryser.id.

2. What we collect

• Account data: email address, username and optional profile image, managed through our authentication provider Clerk.
• Content you submit: URLs of sets you analyze, audio files you upload, the resulting setlists, edits, setlists you build, comments, likes and bookmarks.
• Billing data: your plan, credit balance and payment history. Card details are handled entirely by Stripe; we never see or store them.
• Referral data: if you create your account through someone's referral link, we store which account referred you, the reward status, and a small set of abuse signals (for example whether both accounts came from the same source). The person who referred you sees only that a referral was made and its status, never your e-mail address or name.
• Technical data: IP address, browser information, page analytics (Vercel Analytics, cookieless aggregation), product analytics (PostHog, EU-hosted, cookieless) and, only after your consent, session recordings (all keyboard input masked) and error reports (Sentry).

3. Why, and on what legal basis

• Providing the service (contract): analyzing your sets, storing your results, playback, exports, the API.
• Billing (contract & legal obligation): payments, invoices, tax records.
• Service emails (contract): run-complete notifications, billing alerts. You can switch these off in your account preferences.
• Tips & product updates (consent): only if enabled; one-click unsubscribe in every email.
• Security & abuse prevention (legitimate interest): rate limiting, logging, fraud prevention.
• Referral programme (contract, and legitimate interest for the abuse checks): linking a referred account to the referrer and paying out rewards, as described in the terms.

4. Audio and recognition

To identify tracks, short fragments of the audio you submit are sent to third-party audio recognition services. These fragments are used solely for recognition. Audio from platform URLs (YouTube, SoundCloud, Mixcloud) is processed transiently and deleted after analysis; playback streams from the original platform. Files you upload yourself are stored for 7 days (free) or for as long as your Pro subscription is active.

5. Who receives your data

We use a small set of processors, each bound by data-processing agreements:

• Clerk (authentication, US) · Stripe (payments, US/EU) · Vercel (web hosting, US/EU) · Neon (database, EU region) · Cloudflare (storage & networking) · Resend (email delivery, US) · PostHog (product analytics & session recordings, EU region) · recognition providers (audio fragments only).

Where processors are outside the EEA, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. We never sell your data.

6. How long we keep it

• Account & setlist data: until you delete your account; deletion removes your runs, setlists, comments and credits immediately and permanently.
• Uploaded audio: 7 days on the free tier, or as long as your subscription runs.
• Platform-URL audio: deleted right after analysis.
• Billing records: 7 years (Dutch tax law).
• Server logs & error reports: up to 90 days.

7. Cookies

We use functional cookies for signing in (Clerk). Product analytics (PostHog, EU region) run without cookies under our legitimate interest and record which pages and controls are used, never what you type. Session recordings and error-replay diagnostics only start after you accept them in the cookie notice; withdraw at any time by choosing "Reject" in that notice again (clear the ryser-analytics-consent cookie) or by emailing privacy@ryser.id. No advertising or cross-site tracking cookies.

8. Your rights

Under the GDPR you can request access, correction, deletion, portability of your data, object to processing based on legitimate interest, and withdraw consent at any time. Deleting your account from the account page exercises the right to erasure directly. For anything else, email privacy@ryser.id; we respond within 30 days.

You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

9. Children

ryser.id is not directed at children under 16. We do not knowingly process their data.

10. Changes

We may update this policy; material changes are announced by email or in the app. The date at the top always reflects the current version.