Privacy Policy
Last updated: 24 October 2026
This Privacy Policy explains how Anonymous Tracks (“we“, “us“, “our“) collects and uses personal data when you visit anonymoustracks.com (the “Site“), buy a track or a service, sell your music as a producer (“Seller“), or use our free tools. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR“) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended).
1. Data controller
The data controller is:
Eddj Tedesco, trading as Anonymous Tracks
Via Sant’Antonino – 03043 Cassino (FR) – Italy
Tax code (Codice Fiscale): TDSDDJ83A08C034B
Email: [email protected]
We have not appointed a Data Protection Officer, as we are not required to do so. For any privacy request, write to the email address above.
2. Personal data we collect
2.1 Data you give us
- Account data: username, email address, password (stored only as an encrypted hash), first and last name, account type (customer or seller).
- Order and billing data: name, email, billing country and address, purchased tracks or services, order amounts, invoices and order history.
- Payment data: payments are processed by Stripe and PayPal. We never see or store your full card number; we only receive the payment status, a transaction reference and limited card details (e.g. card brand and last four digits).
- Seller data: public producer name (alias), store profile, PayPal email for payouts, uploaded tracks and files (previews, masters, stems, project files, artwork), track metadata, and sales and payout records.
- Seller agreement and signature: when a Seller submits a track, they sign our Exclusive Track Assignment and Confidentiality Agreement. We store the Seller’s full legal name, the signature (drawn or typed), the date and time of signature, the agreement version, the IP address and the browser user agent. This record proves the transfer of rights and is never shown publicly: the Site only displays the Seller’s alias.
- Messages and requests: data you enter in the contact form, the custom-production / production-brief forms, the “Hire a Ghost Producer” requests and track reports (name, email, subject, message, project details).
- Reviews: reviews you leave on the Site or on Trustpilot.
2.2 Data collected automatically
- Technical data: IP address, browser and device type, pages requested, date and time, collected in server and security logs.
- Cookies and similar technologies: see our Cookie Policy. Analytics cookies are only used if you accept them.
- Usage statistics: with your consent, Google Analytics 4 collects information about how the Site is used. Without consent, no Google Analytics code is loaded.
- Track plays: when a preview is played for at least 5 seconds, we count one play for that track. To avoid counting the same listener twice, we keep a one-way hash of the IP address and browser for 30 minutes; the play statistics we keep (and show only to the Seller) contain no personal data.
2.3 Audio you submit to our tools
- Free Music Copyright Checker and Seller DNA check: your browser extracts a short audio sample (about 12 seconds) which is sent to ACRCloud to identify matching recordings. The sample is not stored by us. For visitors who are not logged in, a one-way hash of the IP address is kept for 24 hours to apply the daily limit of free scans.
- AI-music detection: the original master of each submitted track is sent to ACRCloud’s AI Music Detector; the file is deleted from ACRCloud as soon as the result is received. The result is stored with the track and is only visible to our team.
- Free BPM / key tools: analysis runs entirely in your browser; the audio is not uploaded.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing your account; selling and delivering tracks and services; processing payments; customer support | Performance of a contract (Art. 6(1)(b)) |
| Running the marketplace for Sellers: reviewing submissions, publishing tracks under the Seller’s alias, paying Seller earnings | Performance of a contract (Art. 6(1)(b)) |
| Recording the Seller’s signed agreement (legal name, signature, IP address, timestamp) as proof of the transfer of rights | Performance of a contract and our legitimate interest in proving the chain of rights and defending legal claims (Art. 6(1)(b) and (f)) |
| Copyright (ACRCloud) and AI-music checks on submitted tracks | Legitimate interest in selling only original, human-made music and preventing infringement (Art. 6(1)(f)) |
| Accounting, invoicing and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Answering messages and requests sent through our forms | Pre-contractual measures at your request, or our legitimate interest in replying (Art. 6(1)(b) and (f)) |
| Security, fraud prevention, rate limits on free tools, abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Website statistics (Google Analytics 4) and non-essential cookies | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Review invitations after a purchase (Trustpilot) | Legitimate interest in collecting feedback (Art. 6(1)(f)); you can opt out at any time |
| Service emails (order confirmations, track status, Seller notifications) and, where you opted in or follow a producer, updates about new tracks | Performance of a contract; consent or legitimate interest for updates, with an opt-out in every message |
We do not use automated decision-making that produces legal effects for you. The copyright and AI checks support our team, who make the final decision on every track.
4. How Sellers and buyers see each other’s data
Anonymous Tracks is a marketplace. When you buy a track, the Seller receives the order information needed to fulfil it (e.g. the purchased track, the order date and the amount earned). Buyers only see the Seller’s public alias; a Seller’s legal name, signature and payout details are never shared with buyers. Each Seller is responsible for any personal data they receive and must use it only to fulfil the order.
5. Service providers (processors) and recipients
We share personal data only with providers that help us run the Site, under data processing agreements:
| Provider | Purpose | Location / safeguard |
|---|---|---|
| HostArmada | Web hosting and server logs | Data centre in Frankfurt, Germany (EU) |
| Cloudflare, Inc. | Content delivery network, security, cookieless Web Analytics | USA – EU-US Data Privacy Framework (DPF) |
| Stripe Payments Europe, Ltd. | Card payments, fraud prevention | EU/Ireland; transfers to Stripe, Inc. (USA) under the DPF |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | PayPal payments and Seller payouts | EU/Luxembourg; transfers to the USA under the DPF / SCCs |
| Google Ireland Ltd. / Google LLC | Google Analytics 4 (only with consent); Google Drive (storage and delivery of track packages); Gmail (sending our emails) | EU/USA – EU-US Data Privacy Framework |
| ACRCloud | Audio fingerprinting (copyright check) and AI-music detection | EU processing region (eu-west-1); Standard Contractual Clauses for any transfer outside the EEA |
| Trustpilot A/S | Review invitations and reviews | EU/Denmark |
| CookieYes Limited | Cookie banner and consent records | UK – EU adequacy decision |
We may also disclose data to public authorities when required by law, and to our professional advisers (e.g. accountant, lawyer) under a duty of confidentiality. We never sell your personal data.
6. International transfers
Some providers process data outside the European Economic Area, mainly in the United States. Transfers take place only on the basis of an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified companies) or the Standard Contractual Clauses approved by the Commission, with additional safeguards where needed.
7. How long we keep your data
- Orders, invoices and accounting records: 10 years, as required by Italian law (Art. 2220 of the Civil Code).
- Seller agreements and signatures: for as long as the transferred rights exist and for 10 years after the end of the relationship, to prove the chain of rights and defend legal claims.
- Accounts: until you delete your account or ask us to do so, except for data we must keep by law.
- Messages and requests: up to 24 months after the last contact, unless they lead to an order.
- Free-tool rate limits: hashed IP for 24 hours; play counting: hashed data for 30 minutes.
- Security logs: up to 12 months.
- Analytics data: as configured in Google Analytics (maximum 14 months).
- Consent records: for the period required to demonstrate consent, as set in CookieYes.
8. Your rights
Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to processing (including processing based on legitimate interest and direct marketing); receive your data in a portable format; and withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can change your cookie choices at any time from the “Cookie settings” link on the Site.
To exercise your rights, email [email protected]. We will reply within one month. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.
9. Is providing data mandatory?
Data marked as required in our forms is needed to create an account, complete a purchase, sell tracks or answer your request; without it we cannot provide the service. Consent to analytics cookies is optional.
10. Children
The Site is not intended for people under 16. We do not knowingly collect data from children; if you believe a child has given us personal data, contact us and we will delete it.
11. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), hashed passwords, restricted access to private files (masters, agreements), regular backups and security monitoring.
12. Changes to this policy
We may update this Privacy Policy. The current version is always available on this page, with its date; important changes will be notified by email or on the Site.