What we collect

MustBeTheMusic.app is operated by Blue Blip Tech LLC. This page lists everything the site collects and everything it keeps. There is nothing else.

No accounts There is no sign-up, no login and no password. We never ask for your name, your email address or your postal address, and there is nowhere on the site to give them to us.
What you put on the chart To place a track you give us a link, a genre and an amount. Our server reads the title and description from the page behind that link. Those are what an entry is, and they are public on the chart. The link is stripped of its query string before we store it, so anything you appended to it is dropped, except the one parameter that names the track on YouTube or on Google Play, which is all that tells two such links apart.
Payment Payment happens on Stripe's own checkout page, never on ours. Your card number and billing details are typed into Stripe and never reach our server. We tell Stripe the amount, the currency and the four things we need back afterwards: the link, the title, the genre and the description. We do not send Stripe your name, your email address or your address. When a payment succeeds we keep Stripe's event id, its payment id and the amount. That is all we hold about a payment.
One cookie The site sets one cookie, named vid. It is a random string with a signature attached, minted by us, carrying nothing about you. It is set only when you open a track from the chart, it is scoped to /go, so your browser never sends it when you load the chart, and it lasts a year. Its one job is to stop the same person's clicks being counted twice.
Your dark mode setting If you switch the site to dark, your browser stores the word "dark" or "light" under theme in local storage. It stays in your browser and is never sent to us.
Traffic figures, kept by us We count our own traffic rather than hand it to an analytics company. A visit records the page you were on, the referring site if your browser sent one, and a visitor key. That key is a hash of your address and your browser under a secret salt we throw away every day, which means the same browser is a different visitor tomorrow and yesterday's visitors cannot be recognised again, by us or by anybody who takes the data. We also count how often each entry was on somebody's screen, and how many submissions, checkouts and payments happened. There is no advertising, no session recording, no fingerprinting and nothing that follows you to another site. None of it is sold or shared.
Clicks Each entry carries a running count of how often it was opened. In our traffic figures a click also records which entry it was, when, and the visitor key described above, which expires with the day's salt. For a day after you open a track, a temporary entry in our cache pairs your cookie's random value with that entry's id so a second click does not count again, then it expires by itself.
Your address Our server sees your address, as every web server does. We use it for three things: counting requests so the site cannot be flooded, checking whether a request to the admin pages comes from an allowed address, and computing the daily visitor key above. The flood counters live in our cache with the address as part of the key, in the clear, beside a number, and each one expires within an hour of your last request. Beyond that counter we never write your address down: neither database has an address column, and no address is ever shown anywhere in the site. Our host and our web server may keep their own short-lived access logs, as any website's do, and we use them for nothing else.
What our server fetches for you When a link is submitted, our server goes and looks at it, not your browser. It asks the platform for a title where the platform offers one, and otherwise reads the page's own title and description, following shortened links to wherever they end up. Those sites see our server, not you. The result sits in our cache for a day so the same link is not fetched twice.
Nobody else is watching Fonts, icons and images are served from this site, so nothing on our pages is loaded from anybody else and no other company sees you here. There is no tag manager, no pixel and no embedded widget.
Asking us about any of this Write to support@bluebliptech.com and we will answer. We keep that correspondence for as long as it takes to deal with it and to hold a record of it.