Privacy Policy

The short version

SetDigger is a discovery site for DJ sets published on YouTube. We do not sell your data, and we do not run advertising trackers. We use privacy-respecting product analytics to understand which pages are useful, your browser stores a little state locally, and the videos you watch are embedded directly from YouTube. If you subscribe to Premium, Stripe handles the payment and we never see your card details.

Analytics

We use PostHog, hosted on its EU-based servers, to understand which pages and features are useful — for example which setlists are viewed and which buttons are clicked. It is configured for privacy: it does not store your IP address, sets no cookies and stores nothing at all on your device. Instead, repeat visits within a day are recognised by an irreversible code that PostHog calculates on its own servers and cannot trace back to you; the secret used to build it is thrown away every day. It does not build a profile of you unless you are signed in. Because nothing is stored on or read from your device, no cookie-consent banner is required for it.

We rely on our legitimate interest in understanding how the site is used. If you would rather not be counted, enable “Do Not Track” in your browser settings — we honour it and will stop collecting analytics for you. You can also contact us at hello@setdigger.com to object.

Cookies & browser storage

SetDigger stores small amounts of data in your browser to make the site work: your light/dark theme choice, tracks you save without signing in, an anonymous token that remembers your suggestion votes, and small interface settings (such as a prompt you dismissed) are kept in localStorage, and if you sign in, your login session is stored so you stay signed in. These are functional — they stay on your device and are not used for advertising or cross-site tracking. Our analytics stores nothing on your device at all. You can clear this data at any time from your browser settings.

Embedded YouTube players

Sets are played through YouTube's embedded player. When a video loads, YouTube (Google) may set its own cookies and collect data according to Google's Privacy Policy, which is outside our control.

Free set views & account sign-up

Without an account you can open a limited number of sets per day. To apply that limit we set a first-party cookie (sd_vid) holding a random identifier, and a second cookie (sd_views) listing the sets you opened today. We also keep, on our servers, a per-day record of the sets opened from your network address. The network address is never stored as such: it is run through a keyed one-way hash, so the stored value can be matched on a repeat visit but not turned back into an address. Those per-day records are cleared on a rolling basis, normally within a few days.

When you then create an account, we link it to that identifier, the hashed network address, your browser's user-agent and language settings, and — where our network provider supplies them — its connection fingerprint, network (ASN) and country. We do this to operate the daily limit and to recognise repeat sign-ups, on the basis of our legitimate interest in running a free service fairly. This record is deleted with your account and otherwise after 90 days without activity. To object or ask for access or deletion, contact hello@setdigger.com. Signed-in members are not counted.

Accounts

If you create an account, we store the email address you sign in with so we can authenticate you and save your favourites. You can request deletion of your account and associated data by contacting us.

Premium waitlist

The Dig page is open to every SetDigger account. There is no Dig waitlist: if you enter your address there, we create your account and email you a sign-in link, and we store the address as described under Accounts above. We use it only to sign you in, not for build updates or marketing. The paragraphs below describe the Premium waitlist only.

On the Premium page you can ask to hear about SetDigger Premium. If you do, we store the email address you enter, which page you entered it on, the language setting your browser reports, and the currency that setting implies — the last one only so we know which currencies to support at launch.

The form also has an optional box asking what you want from Premium. It can be left empty and the signup works exactly the same either way. If you do write something, we store it alongside your address and read it to decide what to build; it is never published, never shown on the site, and never included in an email. Please do not put anything sensitive in it — it is a free-text box, so whatever you type is what we store. We erase it as soon as you unsubscribe, and otherwise it is deleted whenever your record is, on the same terms as everything else here.

We ask for this on the basis of your consent (Article 6(1)(a) GDPR), which is why the tick box is never pre-ticked and why we send a confirmation email you have to click. Until you click it, your address is not on the list and we will not email you again; we delete unconfirmed addresses after 30 days — unless you used the unsubscribe link, in which case we keep the opt-out record instead (see below). Once confirmed, we use it only to write to you about SetDigger Premium: the launch announcement, the occasional note on how the build is going, and the occasional question about what you would want from it. That is the whole of it — no sharing, no selling, and it is never used to advertise to you elsewhere.

Every email we send carries an unsubscribe link, and you can withdraw your consent at any time with no explanation. When you unsubscribe we keep a record that this address opted out, and that record is final as far as the website is concerned: entering the address in the signup form again will not put it back on the list, and neither will an old confirmation link. That is deliberate — it means nobody else can undo your opt-out by typing your address into a form. If you would rather the record itself were deleted, or you change your mind and want back on the list, email us and we will do it by hand. Confirmed addresses are deleted after 24 months if no launch has happened by then, since consent to be told about something does not last forever.

The signup form stores nothing on your device: no cookie, no local storage. Delivery is handled by Resend, our email provider, and link and open tracking are switched off — we do not record whether you opened the email or which links you clicked.

Payments

If you subscribe to Premium, the payment is handled entirely by Stripe. Your card details go straight to Stripe and never reach SetDigger's servers. Through Stripe's dashboard we can see the email address and name you paid with, your billing country, the last four digits and brand of your card, the plan, and whether the subscription is active — which is what we need to switch your account over, answer billing questions, and handle refunds.

When you start a checkout we attach a random, one-off reference to the payment so we can tell which visit it came from. That reference is generated fresh each time the upgrade page loads and is not stored on your device. We also record it alongside your click in our analytics — that is what lets us see which visit a payment came from, so for anyone who completes a payment, that visit can be connected to the payment.

We handle payment data to perform the contract you entered into (Article 6(1)(b) GDPR). Stripe keeps payment records for as long as tax and accounting law requires; we keep the subscription status linked to your account for as long as you have one.

Who is responsible for your data

The data controller for SetDigger is Built to Chill, registered with the Netherlands Chamber of Commerce (KvK) under number 98576259.

You have the right to access, correct, or delete your personal data, to object to processing based on our legitimate interest, and to request your data in a portable form. Email us and we will action it. If you are unhappy with how we respond, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Our TikTok account

SetDigger connects to TikTok only to publish promotional videos about SetDigger to SetDigger's own TikTok account. The connection is made once, by us, through TikTok's official login; visitors to this site are never asked to sign in with TikTok, and we do not access any other TikTok user's data.

Through that connection we receive the account's TikTok identifier and basic profile information (user.info.basic) and permission to upload videos to its drafts inbox (video.upload). Uploaded videos stay drafts until we review and post them ourselves in the TikTok app. The access and refresh tokens are stored encrypted in our database, can be read only by our own server and publishing tools, are never shown on the site, and are used for nothing else. We can revoke them at any time, and anyone can disconnect an app from their TikTok account in TikTok's settings.

Contact

Questions about this policy? Email hello@setdigger.com.