Privacy Policy

Controller and contact

The operator of Heptarky is responsible for the processing described in this policy. Heptarky is operated as a personal, free, and non-commercial music discovery project.

Privacy enquiries and requests can be sent to contact@heptarky.com.

Data and purposes

Heptarky uses a local browser identifier to support basic app features such as likes, saved songs, feed state, and view tracking. The app does not currently provide a public user login. If you clear site data, switch browser, or use another device, browser-linked preferences may not carry over.

The app may process interaction data such as liked songs, saved songs, viewed songs, playback duration, and skip signals to operate the feed, preserve requested actions, prevent abuse, and improve the app experience.

If you contact Heptarky, the information in your message is used to answer the enquiry, handle rights or content requests, and maintain necessary records.

Legal bases

• Providing the requested app functions and essential storage.
• Heptarky's legitimate interests in operating, securing, and improving the service, balanced against user rights.
• Consent for YouTube and Spotify third-party media, which can be withdrawn through Cookie settings.
• Compliance with legal obligations and handling legal or rights requests where applicable.

Third-party services

YouTube and Spotify media scripts or embeds load only after you accept third-party media. Once loaded, those providers may set their own cookies or process usage data under their respective policies.

Spotify account actions, such as saving a track or creating a playlist, are handled through Spotify. Heptarky does not control Spotify's account, playback, cookie, or tracking behavior.

Hosting, database, storage, and security providers may process the minimum technical data needed to deliver and protect the service. Some providers may process data outside the European Economic Area using the safeguards described in their own privacy documentation.

Retention

Browser preferences remain until they expire, are replaced, or you clear site data. Media consent is requested again after no more than 24 months. Interaction and security records are kept only while reasonably necessary to operate, protect, and improve the service or to meet legal requirements. Contact records are retained for the time needed to resolve the request and any related legal obligations.

Your rights

Depending on the processing and applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing. You may withdraw media consent at any time without affecting processing carried out before withdrawal.

Requests should be sent to contact@heptarky.com. You may also lodge a complaint with the Spanish Data Protection Agency.

Cookies and local storage

• Essential local storage for app preferences and operation.
• An anonymous local user identifier used for basic app functions such as likes, saves, and feed state. It is functional and is not used for advertising or marketing.
• YouTube media cookies and scripts, loaded only if you accept third-party media.
• Spotify media embeds, loaded only if you accept third-party media.
• Admin or session cookies only for protected admin or private access where applicable.