Privacy

This site is run by Phil (PhilBlines), based in the UK. It exists so you can listen to and download my tracks. It has no adverts, no analytics trackers, and I never sell or share your details with anyone for marketing. This page says exactly what is kept and why.

What the site stores

• An anonymous visitor ID. When you open the site your browser is given a random ID (a Firebase anonymous sign-in). It is not linked to your name or email. It is used so that a listen, download or thumbs up counts once per person, and so your thumbs ups show as yours when you come back. Deleting your browser’s site data removes it.
• Listen, download and thumbs-up records. Each is stored against that anonymous ID with a date. Listen and download records are deleted after two days; thumbs ups stay while you keep them.
• A hashed copy of your IP address. To keep downloads fair (a daily limit per person and per connection) the site keeps a one-way hash of your IP address for the day. The same hash is used to count, once a day, a browser that the automated-traffic check turned away. The address itself is not stored, and the hash is deleted after two days.
• Your email address, only if you give it. If you subscribe, you are sent one message asking you to confirm, and nothing more unless you click it. I keep the address, when and where on the site you signed up, and when you confirmed. It is used only to tell you about new tracks: one email per release, with no tracking of opens or clicks, and an unsubscribe link in every one. If you unsubscribe I keep just the address, marked as unsubscribed, so it cannot be emailed again by mistake. Email info@philblines.com from that address and it is deleted entirely.
• Server logs. Google Cloud keeps standard request logs (address, page, time, browser type) for a short period for security and fault-finding.

If you support the site

The “Support PhilBlines” link opens a donation page run by PayPal. This site never sees your card or PayPal details, and it does not record who gave or how much: the link carries nothing about you, and coming back afterwards just shows a thank-you. PayPal tells me what it tells any recipient (your name, email address and the amount), and handles your data under the PayPal Privacy Statement. I use those details only to keep the records the taxman requires, never for marketing.

Bot protection

Requests to the site are checked by Google reCAPTCHA Enterprise through Firebase App Check, which stops scripts from running up the bill. reCAPTCHA sets a cookie and looks at how your browser behaves to tell people from bots. Google’s handling of that data is covered by the Google Privacy Policy and Terms of Service.

Cookies and browser storage

The site itself sets no tracking cookies. Your browser keeps the anonymous ID and your thumbs ups in its local storage so the site works, and the reCAPTCHA cookie above. Admin pages use a login cookie that only I have.

Where it lives

Data is held with Google (Firebase and Google Cloud, London and Netherlands regions) and downloads are served from Cloudflare storage in the EU. Emails are sent through Resend, a US company, which holds subscriber addresses for that purpose only, under standard contractual safeguards. All three act on my instructions and under their own security terms.

Your rights

Under UK data protection law you can ask what I hold about you, ask for it to be corrected or deleted, or object to its use. Because visitors are anonymous, the only thing I can usually tie to a person is a subscriber email, which I will delete on request. Email info@philblines.com. If you are unhappy with my answer you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If this page changes, the date at the top changes with it.