Privacy

What Downlink is

Downlink hosts free-download pages for music tracks. Fans unlock a download by supporting the artist on their social platforms.

The data controller is Cédric Lucchese (see the legal notice). Contact: cedric.lucchese.1999@gmail.com.

Data about fans

Fans have no account. When you connect SoundCloud to unlock a download, the access token is used server-side for the requested actions (follow, like, repost, comment) and is never stored.

We keep your SoundCloud username next to the download record so the artist knows who supported them. This processing rests on the legitimate interest of the artist in knowing their supporters.

View counts rely on a salted daily hash of your IP address. The raw address is never stored and the hash cannot be reversed.

The only cookies used are short-lived signed cookies strictly required for the unlock flow. There are no trackers and no advertising.

Data about artists

Artists sign in with Google or SoundCloud. We store the profile identifier, display name and, when provided, email address, plus the tracks and files you upload. This processing is necessary to provide the service you sign up for.

Google and SoundCloud act as identity providers under their own privacy policies; Downlink only receives the profile data listed above, never your credentials.

Linking a SoundCloud account goes further than signing in: Downlink keeps the access and refresh tokens SoundCloud issues, so it can read your tracks on your behalf. Unlinking the account deletes them.

Where the data lives

The application runs on servers operated by Hostinger. Like any web server, they log requests (IP address, user agent) for security and diagnostics, for a limited time.

The database and uploaded files are hosted by Convex, Inc., a US company, on servers located in the European Union (AWS eu-west-1). Any incidental transfer to the United States (support, administration) is governed by the European Commission standard contractual clauses included in the Convex data processing agreement.

Retention and your rights

Download records are kept as long as the related track exists. Artists can delete their tracks (and the attached records) at any time from their dashboard. Artist account data is kept while the account exists and erased when its deletion is requested.

You have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability. To exercise them, contact the address below.

You can also lodge a complaint with the CNIL (cnil.fr), the French supervisory authority.

Contact

cedric.lucchese.1999@gmail.com