Privacy
Version 2026-11-01
This notice explains what personal data rwyrd collects through the website rwyrd.app (the waitlist and the public artist pages), why, who handles it, and what you can do about it. We try to keep it short and true. If something here is unclear, write to hello@rwyrd.app.
1. Who is responsible
Emiliano Gambula, trading as GAEM Music (a sole proprietorship, eenmanszaak), Amsterdam, the Netherlands. KvK number: 89817311. Contact: hello@rwyrd.app. We are the controller for the data described below. We have not appointed a data protection officer.
2. The short version
- If you join the waitlist, we keep your email and a few details so we can invite you. You can ask us to delete them at any time.
- Public artist pages count visits and clicks without cookies and without storing your IP address.
- We do not run ads on these pages and we do not sell personal data.
- We use a few service providers (hosting, database) who process data for us. They are listed below.
3. Waitlist
What we collect: your email address, your role (for example artist, manager or label), your consent, the date and time you gave it, and the version of this notice you saw. If you also send us details by email (artist name, links, city), we keep that email to reply to you.
Why: to let you know when rwyrd opens and to invite you. We do not use it for anything else without asking you first.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to hello@rwyrd.app; withdrawing does not affect what we did before. If you do not give your data, you simply cannot join the waitlist.
How long: until we have invited you and for up to 12 months after the launch of rwyrd, or until you ask us to delete it, whichever comes first. If you become a rwyrd user, your account data is covered by the account terms and privacy notice you will see when you sign up.
Spam protection: the form may use Cloudflare Turnstile, which checks that you are not a bot, to protect the form from abuse.
4. Public artist pages and visit statistics
Artists on rwyrd have public pages at rwyrd.app/name. When you visit one, we count the visit and clicks on its links (for example a streaming link). For each count we record only: the page, the type of event, the day, the source (for example Instagram, taken from the link or the referring site), your country (as estimated by Cloudflare from your connection), and whether you use a phone or a computer. We do not store your IP address, we set no cookies and we do not use identifiers to follow you across visits or sites. Visits from known bots and link previews are not counted. The counts are stored with Cloudflare Workers Analytics Engine and shown to the artist as totals.
Because of this, these statistics are not personal data about you in our hands, and we do not ask for consent for them.
Fan email collection, advertising pixels and similar tools are not active on public pages today. If an artist is ever able to switch on a tool such as the Meta Pixel on their page, the page will show a cookie banner first and nothing is loaded or stored until you accept. We will update this notice before that happens.
Like every website, our hosting provider necessarily receives your IP address and basic request data (browser, time) to deliver the page and to protect it from attacks. We do not use this data for statistics or profiling.
5. Who handles data for us
- Cloudflare (Cloudflare, Inc., USA, with EU operations): hosting and delivery of the website (Workers, CDN), visit statistics (Analytics Engine), spam protection (Turnstile) and file storage (R2, set to the EU).
- Supabase (Supabase, Inc.): our database, including the waitlist. The project runs in the EU (Frankfurt, Germany).
These providers act as our processors: they handle data only on our instructions and under data processing agreements. We may use an email service to send you messages; if we do, it will act the same way. We do not sell your data. We may disclose data if the law requires it.
6. Transfers outside the EU
We choose EU locations where we can. Both providers are US companies, so some access or processing outside the European Economic Area can still happen (for example support or security operations). Such transfers rely on the EU-US Data Privacy Framework, where the provider is certified under it, and otherwise on the European Commission Standard Contractual Clauses, which are part of the providers' data processing terms. You can ask us for details at hello@rwyrd.app.
7. Your rights
Under the GDPR you can ask us for access to your data, correction, deletion, restriction of use, a copy in a portable format, and you can object to processing based on our legitimate interests. You can withdraw your consent at any time. Write to hello@rwyrd.app; we will answer within one month. We may need to check that the request really comes from you.
We do not make decisions about you by automated means that have legal or similarly significant effects.
8. Complaints
You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in the country where you live or work. We would appreciate the chance to fix the problem first.
9. Changes
If we change this notice in a way that matters to you, we will update the version and date above (currently 2026-11-01) and, where we rely on your consent, ask you again if needed.