← Back

Privacy Policy

Last updated: April 17, 2026

This Privacy Policy describes how 81 Collection LLC ("we", "us", "Placements") collects, uses, and shares information when you use the Placements service. We collect the minimum information necessary to operate the service. We do not sell your data. We do not share it with advertisers. We do not use third-party analytics or tracking pixels.

1. Information We Collect

CategoryDetailsPurpose
License keyThe subscription key issued to you by Lemon Squeezy, stored as an HttpOnly Secure cookie in your browser and hashed in our edge KV store.Authenticate your subscription.
Customer emailReceived from Lemon Squeezy at checkout.Account lookup and support.
Search inputsThe artist and release titles you type.Executed in memory to run the query. Not persistently stored beyond short operational caches (under 15 minutes).
Operational logsCloudflare's edge logs of IP, user-agent, path, and timestamp.Abuse prevention, rate-limit enforcement, security investigations. Rotated per Cloudflare's retention policy.

2. What We Do Not Collect

3. How We Use the Information

Solely to (a) authenticate your subscription, (b) execute your queries, (c) enforce rate limits and prevent abuse, (d) comply with legal obligations, and (e) respond to support requests. We do not use your information for marketing, profiling, or automated decision-making.

4. Sub-processors

5. Cookies

We set one strictly necessary cookie named ls_key (HttpOnly, Secure, SameSite=Lax, 30-day expiry for paid subscribers, 365-day for internal admin keys). It holds a reference to your active license and is inaccessible to client-side JavaScript. We use no analytics, advertising, or tracking cookies. You can clear it at any time by signing out or clearing your browser's site data.

6. Retention

License status is cached up to seven (7) days and re-verified with Lemon Squeezy on expiry. Rate-limit counters expire within one (1) hour. Customer email metadata is retained for the duration of the subscription plus thirty (30) days after cancellation, then deleted. Cloudflare operational logs follow Cloudflare's retention policy (approximately 30 days).

7. Your Rights

EEA / UK residents (GDPR and UK GDPR)

You have the rights to access, rectify, erase, restrict processing of, and port your personal data, and to object to processing. Our legal bases are contract performance (Art. 6(1)(b)) for delivering the service and legitimate interests (Art. 6(1)(f)) for security and fraud prevention. You may lodge a complaint with your local supervisory authority.

California residents (CCPA/CPRA)

You have the rights to know what personal information we collect and why; to delete personal information; to correct inaccurate personal information; to opt out of sale or sharing (we do not sell or share personal information as defined by the CCPA); and to non-discrimination for exercising these rights. Categories collected in the last 12 months: identifiers (email), commercial information (subscription status), and internet activity (IP, request timestamps).

All users

Exercise any right by emailing alex@81collection.com. We will respond within 30 days (or 45 for GDPR, with extension up to 90). We may need to verify your identity to fulfil the request.

8. International Transfers

Cloudflare and Lemon Squeezy operate globally. Data may be processed in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses and our sub-processors' certifications (e.g., Cloudflare Data Processing Addendum).

9. Security

All traffic is served over HTTPS with HSTS. License keys are stored only in Cloudflare KV, scoped to this project. Server secrets (API keys) are held in Cloudflare's secret store and are never exposed to the browser. The license cookie is HttpOnly and Secure. We do not load third-party scripts. Comparisons against the internal admin key use constant-time equality.

10. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Do Not Track

We do not respond to browser Do-Not-Track signals because we do not track users across sites.

12. Changes

If this policy changes materially, we will update the "Last updated" date and notify active subscribers by email where feasible. Continued use after the effective date constitutes acceptance.

13. Contact

81 Collection LLC · alex@81collection.com