The short version: your listening-history files are processed entirely in your browser and are never uploaded to us; we don't even have a server that could receive them. We have no accounts, no analytics, no advertising, no cookies, and no database. We do not sell or share your personal information, ever. Data leaves your browser in exactly three situations, all optional and all started by you: running an AI Reading (a summary of your stats goes to Anthropic, using your own API key), ordering merchandise (your shipping and payment details, plus your print design, go to our payment and printing partners), and emailing yourself a "save file" (your computed stats, sent to your own inbox and not kept by us).
Strata Music ("Strata," "we," "us") is a sole proprietorship operating in Massachusetts, USA, under the registered business name "Strata Music." For any privacy question or request, email us at stratamusic.conry@gmail.com. For purposes of data-protection laws that use the term, Strata Music is the "controller" of the limited personal information described below.
When you upload your Spotify or Apple Music data export, it is read and analyzed by JavaScript running in your own browser. Your files are never transmitted to Strata. We do not have user accounts or a database, and we cannot see your listening history. When you close or refresh the page, the analysis is gone. Nothing is saved, not even in your browser's local storage, unless you deliberately save a copy yourself (see "Save file," below).
1. The AI Reading (optional). If you choose to run "The Reading," your browser sends a summary of your listening statistics, including your top artist names, total hours, and listening-pattern percentages, but never your raw uploaded files, directly to Anthropic's API to generate your portrait. This request uses your own Anthropic API key, under your own Anthropic account, and is governed by Anthropic's privacy policy. The request goes from your browser straight to Anthropic; it does not pass through Strata, and we never see your key or the portrait. Your key is held only in your browser's memory for the session and is not saved.
2. Merchandise orders (optional). If you order a physical product, we need enough information to charge you and ship it. Specifically:
We keep no order database of our own; order records live in Stripe, Printify, and our order-notification email. See "How long we keep things," below.
3. Save file (optional). Strata has no accounts, so if you want to reopen a reading later, or add a future year's data to one you already made, you save a small file yourself, in one of two ways: download it (stays entirely on your device, never touches us) or have it emailed to you. If you choose email, your browser sends the file and the address you typed to a Strata email function, which hands it to our email provider, Resend, to deliver to you, and then discards it. We do not keep a copy, log its contents, or store it in a database. Resend's privacy policy.
A save file contains only your computed, aggregate listening statistics (total hours, your top artists and tracks, patterns by year and time of day, and similar summaries), never your raw streaming history. It is not readable by anyone unless they have the file itself or your email account.
Like most websites, our pages load a few resources from content delivery networks: fonts from Google Fonts, and charting/graphics libraries from jsDelivr and cdnjs (Cloudflare). When your browser fetches these, those services receive your IP address and browser information, as with any web request. Our host, Netlify, keeps standard server logs (including IP addresses) for security and operations. We run no analytics, no advertising trackers, and no cookies.
We have never sold personal information, and we do not sell or "share" (as those terms are used in California and other state privacy laws) the personal information of any consumer, including anyone under 16. We do not use your information for cross-context behavioral advertising. The only parties who ever receive your information are the service providers listed above, and only to do the specific job you asked for (process a payment, print and ship an order, deliver an email you requested).
The strongest protection is structural: we don't collect or store most of what you do in Strata, so there is very little for anyone to breach. For the information that does flow to our providers, we rely on encrypted connections (HTTPS/TLS) and on established processors (Stripe, Printify, Resend, Netlify) that maintain their own security programs. No method of transmission or storage is ever 100% secure, and we cannot guarantee absolute security.
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the rights described above (know, access, delete, correct, portability, and to opt out of sale/sharing). As stated, we do not sell or share personal information, so there is nothing to opt out of. The only category of personal information we handle is what you provide to place an order (identifiers such as name and email, and commercial/shipping information), used solely to fulfill that order. You may exercise your rights, or authorize an agent to do so, by emailing us at the address above.
Strata is operated from the United States, and any order information is processed in the United States and other countries by the providers listed above. If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: performance of your order (for purchases), your consent (for the optional AI Reading and emailed save file, which you may withdraw at any time), and our legitimate interests in operating and securing the Service. You may have rights to access, correct, erase, restrict, object to, or port your information, and to lodge a complaint with your local supervisory authority. Contact us at the address above to exercise them.
Strata is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Purchases require you to be 18 or to have a parent or guardian place the order. If you believe a child under 13 has provided us personal information (which could only happen through a merchandise order), contact us and we will delete it.
If we change this policy, we'll update the effective date at the top. Meaningful changes to what data leaves your browser will be disclosed in the product itself, not just here.