What we collect
MustBeTheMusic.app is operated by Blue Blip Tech LLC. This page lists everything the site
collects and everything it keeps. There is nothing else.
No accounts There is no sign-up, no login and no password. We never ask for your
name, your email address or your postal address, and there is nowhere on the site to give
them to us.
What you put on the chart To place a track you give us a link, a genre and an
amount. Our server reads the title and description from the page behind that link. Those
are what an entry is, and they are public on the chart. The link is stripped of its query
string before we store it, so anything you appended to it is dropped, except the one
parameter that names the track on YouTube or on Google Play, which is all that tells two
such links apart.
Payment Payment happens on Stripe's own checkout page, never on ours. Your card
number and billing details are typed into Stripe and never reach our server. We tell Stripe
the amount, the currency and the four things we need back afterwards: the link, the title,
the genre and the description. We do not send Stripe your name, your email address or your
address. When a payment succeeds we keep Stripe's event id, its payment id and the amount.
That is all we hold about a payment.
One cookie The site sets one cookie, named vid. It is a random string with
a signature attached, minted by us, carrying nothing about you. It is set only when you open
a track from the chart, it is scoped to /go, so your browser never sends it when you
load the chart, and it lasts a year. Its one job is to stop the same person's clicks being
counted twice.
Your dark mode setting If you switch the site to dark, your browser stores the word
"dark" or "light" under theme in local storage. It stays in your browser and is never
sent to us.
Traffic figures, kept by us We count our own traffic rather than hand it to an
analytics company. A visit records the page you were on, the referring site if your browser
sent one, and a visitor key. That key is a hash of your address and your browser under a
secret salt we throw away every day, which means the same browser is a different visitor
tomorrow and yesterday's visitors cannot be recognised again, by us or by anybody who takes
the data. We also count how often each entry was on somebody's screen, and how many
submissions, checkouts and payments happened. There is no advertising, no session recording,
no fingerprinting and nothing that follows you to another site. None of it is sold or
shared.
Clicks Each entry carries a running count of how often it was opened. In our
traffic figures a click also records which entry it was, when, and the visitor key described
above, which expires with the day's salt. For a day after you open a track, a temporary
entry in our cache pairs your cookie's random value with that entry's id so a second click
does not count again, then it expires by itself.
Your address Our server sees your address, as every web server does. We use it for
three things: counting requests so the site cannot be flooded, checking whether a request to
the admin pages comes from an allowed address, and computing the daily visitor key above.
The flood counters live in our cache with the address as part of the key, in the clear,
beside a number, and each one expires within an hour of your last request. Beyond that
counter we never write your address down: neither database has an address column, and no
address is ever shown anywhere in the site. Our host and our web server may keep their own
short-lived access logs, as any website's do, and we use them for nothing else.
What our server fetches for you When a link is submitted, our server goes and looks
at it, not your browser. It asks the platform for a title where the platform offers one, and
otherwise reads the page's own title and description, following shortened links to wherever
they end up. Those sites see our server, not you. The result sits in our cache for a day so
the same link is not fetched twice.
Nobody else is watching Fonts, icons and images are served from this site, so
nothing on our pages is loaded from anybody else and no other company sees you here. There
is no tag manager, no pixel and no embedded widget.
Asking us about any of this Write to
support@bluebliptech.com and we will answer. We keep that correspondence for as long as
it takes to deal with it and to hold a record of it.