Privacy

Who is responsible

The operator of TopMySong is the controller of personal data processed for this site. This notice covers the public chart, these legal pages, and the payment flow when it ships.

What we process

We do not sell YouTube views, and we do not import YouTube Analytics or any YouTube popularity metric. Rank is bought on this chart; it is not a measure of popularity.

When you push a song, we intend to process the email you give us (receipts, claim links, required notices), a truncated or hashed network address for fraud and dispute evidence, and the payment references Stripe returns. We do not store card numbers. We do not host audio, so we do not process your audio files.

Until checkout ships, visiting these pages does not create a payment record.

Why we process it

Contract: sending a receipt and performing the ranking service you paid for. Legitimate interests: fraud, security, chargeback evidence. Legal obligation: accounting records and notices we are required to keep. Marketing email is consent, asked separately, never bundled with the rank-can-change checkbox.

Rank can change after payment; that fact is product behaviour, not a profile we build about you.

Cookies

Launch storage is strictly necessary (security, checkout continuity when it ships, consent preference). No remarketing pixels. Optional analytics, if ever enabled, will require a prior choice with reject as easy as accept.

Processors and rights

When those features ship, payment data is processed by Stripe, email by Resend, hosting by Vercel, and the database by Supabase. Stripe also processes some payment data for its own legal, fraud and security purposes. We do not describe Stripe as "only our processor".

You can ask for access, correction, deletion, restriction, objection or portability. Consumer-rights and privacy requests will work with a transaction reference and email, without requiring an account. A dedicated request portal ships with the compliance layer.