← Back to home

Legal

Privacy Policy

Last updated:

What we collect, why we need it, and the choices you have when you visit Seventh Nap or share your music.

1. Who this policy covers

This policy explains how Seventh Nap handles personal information when you browse this website, request an artist sign-in link, use the artist portal, submit music, or contact us. Seventh Nap is responsible for how information is used for these website activities.

For privacy questions or requests, contact hello@lofi.fish. This policy does not cover websites and services operated by others.

2. Information we collect

  • Contact and account details: your email address, artist or display name, account identifiers, sign-in records, and profile details you choose to add, such as your location, biography, images, influences, and social links.
  • Submission details: release plan choices, track titles, listening links, genre, descriptions, masters, artwork, participant names and legal names, verified emails, roles, artist shares, plan-rule and website-term confirmations, and review, transfer and message history.
  • Agreement records: the original and signed agreement PDFs, required signers, signature progress, signing dates and completion certificates. The signing service also records evidence such as authentication events, timestamps and technical request information.
  • Messages: information you send when asking for support, reporting content, or making a privacy request.
  • Technical information: hosting and delivery services may process IP addresses, browser and device information, requested URLs, timestamps, and error or security logs when serving the site or sending sign-in emails.

Fields marked as required are needed to process the relevant request; without them we may be unable to review a demo or provide account access. Other fields are optional. Do not include sensitive personal information or another person's information without permission.

3. Why we use information

We use information to create and authenticate accounts, maintain artist profiles, review demos, communicate about submissions, answer requests, and keep the website secure. Review decisions are made by our team, rather than an automated decision system.

Where data protection law requires a legal basis, we rely on providing the website features you request, our legitimate interests in reviewing music and operating a secure website, and applicable legal obligations. Where consent is required for an optional use, we ask separately and you can withdraw it.

Requesting a sign-in link or submitting a demo does not subscribe you to marketing emails. We do not sell personal information or share it for targeted advertising.

4. Cookies and browser storage

  • Sign-in cookie: lofi_session keeps you signed in for up to seven days. Signing out removes it from your browser. Blocking it prevents authenticated features from working.
  • Theme preference: seventh-nap-theme in local storage remembers your light or dark theme until you change it or clear the site's browser data.

We do not currently run advertising pixels or audience analytics tools on this website. If we introduce non-essential tracking, we will update this notice and request consent where required before enabling it.

You can clear cookies and local storage through your browser settings. This may sign you out and reset your theme.

5. Providers and external services

Our team and service providers process information needed to operate the site. The current services include:

  • Vercel and the connected Postgres database service: website delivery, account and submission records, and file storage through Vercel Blob.
  • Cloudflare Email Service: delivery of sign-in, submission, review and signing messages, including recipient addresses, message content and delivery information. Resend may be used as a configured alternative.
  • Documenso on sign.lofi.fish: our separately hosted signing service processes agreement PDFs, required signer details, signatures and completion evidence.
  • Google Fonts: the browser loads our icon font from Google. This sends Google technical request information, including your IP address. See Google's Privacy Policy.

If you open a streaming or social link, or supply a file-sharing link, that provider handles information under its own policy. We may also disclose relevant information when legally required or when necessary to investigate misuse and protect rights or safety.

6. Submission and file visibility

We use submission details for review and follow-up. Sending a demo does not automatically create a public release page. Artist names, credits, biographies, and artwork used on public release pages are visible to visitors.

New masters, agreement PDFs and submission artwork use private storage. Downloads require authenticated access to the associated track, release or agreement. The main submitter manages materials; verified collaborators can access their participating tracks and signing agreements. Internal review notes are restricted to the label. Public release artwork is published only after the label selects and approves it. Historical uploads from the earlier system may still use public URLs while they are being inventoried and migrated. External listening links follow the access settings of their provider.

7. How long information stays

Account records remain stored while your account is in use. Demo records, files, and correspondence are retained for review and follow-up; completing a review or declining a demo does not automatically delete them. You can contact us to request deletion of your account or submission.

When considering retention and deletion, we take account of active requests, unresolved issues, security needs, and any legal record-keeping duties. Limited records may need to remain for those reasons, and copies in provider backups may persist until those backups expire.

Artist sign-in links expire after 20 minutes and can be used once. Expiry stops a link from working; it does not itself erase the associated account or sign-in record.

8. International processing and security

Cloud and email providers may process information in countries other than the one you live in. Applicable protections and transfer requirements depend on your location and the provider's processing arrangements. Contact us for information about the locations and safeguards relevant to your request.

We use measures such as authenticated access to the portal, expiring sign-in links, and protected session cookies. No website or storage service can guarantee absolute security. Keep your email account and devices secure, and contact us if you notice a problem.

9. Your choices and rights

Depending on applicable law, you may have the right to access or obtain a copy of your information, correct it, request deletion, restrict processing, object to certain uses, or receive it in a portable format. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may also complain to your local data protection authority.

You can edit available profile fields in the portal. For other requests, email hello@lofi.fish, ideally from the address associated with your account or submission. Identify the information or request concerned. We may ask for proportionate verification and will respond within the time required by applicable law.

10. Children and policy updates

The account and submission tools are intended for artists who can use them lawfully. If you are below the age of majority, involve a parent or guardian as required where you live. These tools are not directed at children below the local age at which they can lawfully provide personal information. A parent or guardian can contact us about information a child has provided.

We will revise this notice when our practices change and update the date above. For material changes, we will provide a notice on the website or by email as appropriate, and obtain consent when required.