The short version: your listening-history files are processed entirely in your browser and are never uploaded to us; we don't even have a server that could receive them. We have no accounts, no analytics, no advertising, no cookies, and no database. We do not sell or share your personal information, ever. Data leaves your browser in exactly one situation, which is optional and started by you: ordering merchandise (your shipping and payment details, plus your print design, go to our payment and printing partners).
Strata Music ("Strata," "we," "us") is a sole proprietorship operating in Massachusetts, USA, under the registered business name "Strata Music." For any privacy question or request, email us at stratamusic.conry@gmail.com. For purposes of data-protection laws that use the term, Strata Music is the "controller" of the limited personal information described below.
The “See a demo” button opens a real listening history rather than invented data, so you can see what Strata actually produces before uploading anything. That record is the site owner’s own Spotify history, published deliberately and with permission, with some of it removed at his request. It contains no information about you, sets no cookie, and sends nothing anywhere: it is a static file your browser downloads and reads locally, exactly like your own upload.
When you upload your Spotify or Apple Music data export, it is read and analyzed by JavaScript running in your own browser. Your files are never transmitted to Strata. We do not have user accounts or a database, and we cannot see your listening history. When you close or refresh the page, the analysis is gone. Nothing is saved, not even in your browser's local storage. The one exception is checkout: while you are on our payment partner's page, a temporary copy of your results is held in that browser tab only, so the dashboard can reopen when you come back. It is deleted as soon as you return, or when you close the tab, and it never leaves your device.
Merchandise orders (optional). If you order a physical product, we need enough information to charge you and ship it. Specifically:
We keep no order database of our own; order records live in Stripe, Printify, and our order-notification email. See "How long we keep things," below.
Like most websites, our pages load a few resources from content delivery networks: fonts from Google Fonts, and charting/graphics libraries from jsDelivr and cdnjs (Cloudflare). When your browser fetches these, those services receive your IP address and browser information, as with any web request. Our host, Netlify, keeps standard server logs (including IP addresses) for security and operations. We run no analytics, no advertising trackers, and no cookies.
We have never sold personal information, and we do not sell or "share" (as those terms are used in California and other state privacy laws) anyone's personal information, whatever their age. We do not use your information for cross-context behavioral advertising. The only parties who ever receive your information are the service providers listed above, and only to do the specific job you asked for (process a payment, print and ship an order, deliver an email you requested).
The strongest protection is structural: we don't collect or store most of what you do in Strata, so there is very little for anyone to breach. For the information that does flow to our providers, we rely on encrypted connections (HTTPS/TLS) and on established processors (Stripe, Printify, Resend, Netlify) that maintain their own security programs. No method of transmission or storage is ever 100% secure, and we cannot guarantee absolute security.
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the rights described above (know, access, delete, correct, portability, and to opt out of sale/sharing). As stated, we do not sell or share personal information, so there is nothing to opt out of. The only category of personal information we handle is what you provide to place an order (identifiers such as name and email, and commercial/shipping information), used solely to fulfill that order. You may exercise your rights, or authorize an agent to do so, by emailing us at the address above.
Strata is operated from the United States, and any order information is processed in the United States and other countries by the providers listed above. If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: performance of your order (for purchases) and our legitimate interests in operating and securing the Service. You may have rights to access, correct, erase, restrict, object to, or port your information, and to lodge a complaint with your local supervisory authority. Contact us at the address above to exercise them.
Strata is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Purchases require you to be 18 or to have a parent or guardian place the order. If you believe a child under 13 has provided us personal information (which could only happen through a merchandise order), contact us and we will delete it.
If we change this policy, we'll update the effective date at the top. Meaningful changes to what data leaves your browser will be disclosed in the product itself, not just here.