What we collect.
This page explains what acousticridge.com collects when you visit, why, who else handles it and how long it's kept. The site is run by [legal name of the person or business]. For questions, or to have your data deleted, email [privacy contact address].
Last updated [date this page goes live]
Using the site
When you use the public pages, our own server records:
- the page you viewed, how long you stayed and how far you scrolled, sent when you leave the page or switch tabs
- what you type in the setlist search and how many songs matched, once you pause typing, if it's at least two characters
- which songs you open on the setlist
- which show you add to your calendar
- what you ask the Vibe Picker, with the summary and songs it gave back, when it works
Each record is stored with the time and a hashed IP: a 16-character code made from your IP address and a secret key. It lets us tell repeat requests apart without storing the address itself. We use these records to see what people look for and what's working. We don't record visits to the admin pages.
Vibe Picker
When you ask for a set, we send what you typed (up to 1,000 characters) and our song list to Anthropic's AI through Cloudflare AI Gateway, and show you the answer. The gateway's log doesn't keep what you typed or the answer. Before each request we also log your hashed IP and the time, to cap how many requests one visitor, and the site as a whole, can make. Please don't type anything personal into it.
Booking
The Email Us buttons open your own email app with a message to [email protected]. What you write goes to our Gmail inbox; this site never sees it. We do count clicks on those buttons (see Analytics).
Owner: the booking form is hidden on the site for now (Book Us links to
email instead), but /api/book still accepts inquiries. Keep the next paragraph,
and Twilio under "Who else handles it", if the form comes back; otherwise delete them.
Booking form. If you send our booking form, we store your name, phone number and message, and the venue and date if you give them, with a hashed IP and the time. We text the same details, without the hashed IP, to the band's phones through Twilio. The hashed IP limits how many inquiries one visitor can send in an hour.
Analytics
Mosaicdeck. Every public page loads Mosaicdeck's analytics script. For each
page view it sends which page you're on, the domain of the site that linked you here, any
utm_source and utm_campaign tags in the link, and the width of
your browser window. It also reports script errors, and we send it:
- which Email Us button you click
- how many songs a Vibe Picker set has
- which show you add to your calendar
From each request Mosaicdeck works out your country, device type, browser and operating system. It counts unique visitors with a code made from your IP address and browser, using a key that changes every day, and it doesn't store your IP address. It keeps individual events for 90 days, and only totals after that.
Cloudflare Web Analytics. Every public page also loads Cloudflare's analytics script, which reports page views and how quickly pages load.
Neither script sets cookies or stores anything in your browser. The site doesn't respond to Do Not Track signals.
Cookies and browser storage
Our code sets no cookies on the public pages. It keeps one setting in your browser's session
storage, ar-palette: the color scheme you landed on, so it stays the same until
you close the tab.
The admin pages are for the band. Google handles their sign-in and tells us the person's
name and email address. Our code sets two cookies there: ar_oauth_state, for up
to 10 minutes while signing in, and ar_session, which keeps an allowed admin
signed in for 24 hours.
Who else handles it
- Cloudflare hosts the site and runs its server code, its database, the AI Gateway and Web Analytics. Every request passes through Cloudflare, so it sees your IP address and browser details. The AI Gateway logs each Vibe Picker request without your text or the answer: the time, the AI model, how much text went each way, how long it took, the cost and whether it worked. It keeps those entries for [how long the AI Gateway keeps logs].
- Anthropic receives your Vibe Picker text and our song list, and writes the set.
- Mosaicdeck runs the analytics described above.
- Twilio delivers booking form texts to the band, and keeps them for [how long Twilio keeps messages].
- Google serves the site's main font from Google Fonts on every page, so it sees your IP address and browser details. Google also runs the admin sign-in and our Gmail inbox.
- Sites we link to, such as Instagram, Facebook, YouTube, Spotify, Genius, Google Maps and venue websites, hear nothing about you unless you follow a link, and then their own privacy policies apply.
What's in our database
What we store goes into our database, Cloudflare D1:
The usage records above, including Vibe Picker text and the sets it built, each with a hashed IP and the time. Also a log of changes made in the admin pages, with the admin's email address.
Kept [retention period: nothing deletes these rows yet]
Booking form inquiries: name, phone number, message, venue and date, with a hashed IP and the time, plus our status and notes on each.
Kept [retention period: nothing deletes these rows yet]
A hashed IP and the time of each Vibe Picker request. Only the last 24 hours are used.
Kept [retention period: nothing deletes these rows yet]
Our shows, our songs and the artists named on the home page. Nothing about visitors.
Kept Until we change them
The band's private set lists, and the planning chat used to build them, which only the band's admins can see. Nothing about visitors.
Kept Until we delete them
Questions and deletion
To ask what we hold about you, or to have it deleted, email [privacy contact address]. Most records don't include your name, so tell us what you sent or searched for and roughly when.