Privacy Policy

1. Controller

Sebastian Behrendt
Marienthaler Str. 145
20535 Hamburg
Germany

Email: hello@secret.vip

2. Hosting and server logs

This site is hosted on infrastructure operated by Hetzner. Server logs may process IP address, timestamp, requested URL, referrer, user agent and technical request data to keep the site secure and stable. Proxy access logs that contain IP addresses are kept for no longer than seven days.

Campaign entry counts

Our /go/ campaign links record aggregate request counts by link, day (Europe/Berlin) and request category (ordinary, bot or prefetch) to evaluate our release channels. This server-side counter uses no cookies or browser JavaScript and stores no IP address, user agent, referrer, click identifier or individual request history. Request headers are used transiently for category classification. These counts do not identify unique people or prove streams.

Aggregates are retained for no more than 25 months; backup snapshots rotate within 35 days. Approved campaign parameters may be forwarded to the landing page, but raw click identifiers are not stored in this counter. Optional Umami and Meta measurement remains subject to your separate consent. Contact hello@secret.vip with questions or objections.

3. Consent management

We use a consent mechanism to control optional analytics and future marketing tools. Your choice is stored in your browser so we can respect it on later visits. You can change your choice at any time via “Privacy settings”.

4. Analytics

If you consent to analytics, we use Umami Analytics on this site. In that case, page views, selected link clicks and funnel events can be measured to understand which campaigns and landing pages perform.

If analytics consent is granted, attribution details such as src, utm_source, utm_medium, utm_campaign and utm_content may be stored locally in your browser and sent with events so we can attribute visits and signups to the correct campaign.

5. Marketing

If you consent to marketing, this site can load Meta Pixel to measure ad-related visits and conversions such as landing page views and lead actions. Meta may process personal data such as IP address, browser information, page activity and event data for measurement and ad optimization.

Meta services should only be activated after explicit consent. You can withdraw that consent at any time via “Privacy settings”. If you later add Meta Conversions API, this policy should be extended again with the exact server-side processing details.

6. External links

This site links to external services such as Spotify, Apple Music, SoundCloud, YouTube, Instagram and TikTok. Once you leave this site, the privacy rules of those services apply.

7. Your rights

You may request information about your personal data, ask for correction or deletion, and withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.

8. Click measurement for streaming links

When you open one of our links to Spotify, Apple Music or SoundCloud, we may count how often that link is opened. We only store aggregated numbers per day, song, streaming service and, where applicable, the shared campaign or post link. We do not store IP addresses in our counter database, we set no cookies and we do not build personal usage profiles. Recognisable automated requests and preview requests are reported separately. Opening a link does not prove that a song was played or saved afterwards. This helps us improve our own releases and campaigns and is based on our legitimate interest under Art. 6 (1) (f) GDPR. The aggregated counters contain no personal data and are kept without a fixed deletion period so that we can compare releases over time. If personal data is processed on this basis, you may object for reasons arising from your particular situation; please use the contact details of the controller above. Our other optional analytics and advertising tracking still runs only with your consent.