Privacy Policy

Entity: Samplette LLC

Effective: June 16, 2026

At Samplette LLC, accessible at samplette.io, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your information.

1. Scope

This Policy applies to all visitors, registered account holders, and users of our website and related services. It governs personal data collected through the Service, including through forms, cookies, APIs and other associated digital interactions. It does not apply to offline data collection (e.g., phone or postal communications) or third-party websites and services we do not own or control. Those third parties are responsible for their own privacy practices, and we encourage you to review their policies.

2. Information we collect

• Directly provided data: Name, email address, account details, profile preferences and messages or inquiries you send us.
• Automatically collected data: IP address (processed transiently for routing, security, and abuse prevention purposes), device identifiers, browser information, pages visited, operating system, actions taken, interactions, timestamps, referral URLs, cookies, and local storage.
• User-generated content: Comments, playlists, notes, saved filters, and related metadata.
• Analytics data: Site usage and performance metrics collected via analytics tools (e.g., via Google Analytics) to understand performance and user behavior.
• Security data: Pseudonymous identifiers derived from account or device identifiers using a one-way cryptographic function, user agents, and related technical metadata used to detect abuse, enforce rate limits, prevent fraud or malicious activity, and ensure platform integrity.

We may combine information collected automatically with information you provide directly to improve and secure the Service.

3. How we use your information

• Provide and operate the Service and core functionality.
• Improve and personalize features and user experience, including by analyzing your saved playlists, favorites, and listening activity to improve content recommendations and platform features.
• Communicate with you about updates, account matters, support, and service-related notices, including legal notices. If you have opted in, we will send you our newsletter and other promotional emails and communications directly from us, via beehiiv, or via other email marketing platforms we may use from time to time.
• Security and fraud prevention, including abuse detection and enforcement of technical limits (e.g., rate limiting).
• Compliance with legal and regulatory obligations and enforcement of our Terms of Service or other agreements.
• Develop aggregated and anonymized analytics to evaluate platform performance, understand user trends, and guide product improvements.
• Determine the default opt-in state for marketing communications based on your approximate location, in compliance with applicable laws. For example, users in regions requiring explicit consent (such as the EU/EEA) will have the "Subscribe to our newsletter and receive other promotional emails and communications" checkbox unchecked by default at registration.

4. Legal bases for processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data only when a lawful basis under the General Data Protection Regulation (GDPR) or UK GDPR applies. These include:

• Consent: When you have given us clear permission to process your information for specific purposes, for example, enabling analytics or accepting cookies, subscribing to updates, or participating in optional features. You may withdraw your consent at any time; such withdrawal does not affect how your information was processed while your consent was in place.
• Contractual necessity: When processing is required to provide the Service you request, such as creating or managing your account, providing access to the Service, or responding to your customer support requests.
• Legitimate interests: When processing is necessary for our legitimate business purposes in accordance with applicable law. Such legitimate business purposes include without limitation improving the Service, maintaining security, preventing fraud or abuse, understanding usage trends, and ensuring network and information security.
• Legal obligation: When we process data to comply with applicable laws or lawful requests, such as tax, accounting, consumer protection, or data-protection requirements, or to respond to a court order or regulatory inquiry.

5. Sharing and disclosure

We do not sell personal information for monetary consideration. However, certain disclosures of personal information for advertising purposes may constitute "sharing" under California law, as described in Section 10. We may share information with:

• Service providers: Hosting, analytics, security, and support vendors who process data on our behalf under appropriate safeguards.
• Legal and safety: Where required by law or to protect rights, safety, or the integrity of the Service.
• Business transfers: In the event of a merger, acquisition, or asset sale, subject to applicable safeguards.
• Third-party data sources: We use the Discogs Data Dump under the Creative Commons CC0 1.0 Universal Public Domain Dedication. Data © Discogs. While CC0 does not require attribution, we acknowledge Discogs as the source of this dataset.
• Discogs images: The Service displays certain images sourced from Discogs. By Discogs' uploader terms, such images are either in the public domain, made available under the Creative Commons CC0 "No Rights Reserved" license, or used under U.S. fair use or first sale doctrines to represent a product for commentary, review, or resale. When you view pages containing these images, your browser requests them directly from Discogs' servers. This request may transmit your IP address, browser type, and other relevant technical information (such as operating system and referring URL) to Discogs. Discogs acts as an independent controller of this data. For details on how Discogs handles such data, please refer to the Discogs Privacy Policy.
• Cloudflare (security and performance): We use Cloudflare, Inc. as a content delivery network (CDN) and security provider to help protect the Service against malicious activity (e.g. DDoS attacks), improve site load performance, and manage traffic. When you access our website, Cloudflare may process limited technical information such as your IP address, system configuration, and request metadata for these purposes. Cloudflare acts as our processor under GDPR and stores this information for short periods in accordance with its data retention policies. For more information, see the Cloudflare Privacy Policy.
• Paddle (merchant of record): We use Paddle (Paddle.com Market Limited) as our merchant of record for processing payments for Samplette Pro subscriptions. When you purchase a Pro subscription, Paddle collects and processes payment information, billing details, and contact information as necessary to complete the transaction. We also send your IP address to Paddle to determine the correct pricing and applicable taxes based on your location. Paddle acts as an independent controller of this data. For more information, see the Paddle Privacy Policy. While we do not have access to full credit card numbers or other sensitive financial details, we may store limited payment information, such as the last four digits of your card and the expiration date, for the purpose of managing your account and subscription. All payment information and data collected via Paddle are processed in accordance with the Paddle Terms of Use and the Paddle Privacy Policy.
• beehiiv (email marketing): If you check the "Subscribe to our newsletter and receive other promotional emails and communications" checkbox, we will share your email address with beehiiv, Inc., our email newsletter platform, solely to send you the communications you requested. beehiiv acts as our processor under applicable data-protection law. You may unsubscribe at any time by clicking the unsubscribe link in any email or by updating your preferences in the Profile menu. For more information, see the beehiiv Privacy Policy.

6. Cookies, local storage, and tracking

We use cookies and local storage to operate and improve the Service, remember preferences, and measure usage. See our Cookie Policy for details and choices. If you are in the EU/EEA, we obtain your consent for non-essential cookies via our cookie banner before setting them. You can update or withdraw your cookie consent at any time by going to the Settings menu under the Privacy section of the Service. Changes take effect immediately. Strictly necessary cookies are deployed on the basis of our legitimate interests in operating and securing the Service and do not require your consent.

• Local storage: We remember previously viewed video identifiers and recent activity so content is not shown repeatedly and new activity can be indicated.
• Google Analytics: We use Google Analytics to measure usage. Google Analytics is only loaded after you have accepted analytics cookies through our consent banner or Settings menu under the Privacy section. To opt out across the web, visit http://tools.google.com/dlpage/gaoptout.
• Cloudflare: Cloudflare sets strictly necessary cookies to protect the site from malicious traffic and optimize delivery. These cookies are essential to the functioning of the Service and cannot be disabled. For details, see the Cloudflare Cookie Policy.
• Advertising (Playwire): All or partial advertising on this Website or App is managed by Playwire LLC. If Playwire publisher advertising services are used, Playwire LLC may collect and use certain aggregated and anonymized data for advertising purposes. To learn more about the types of data collected, how data is used and your choices as a user, please visit https://www.playwire.com/privacy-policy.

You may withdraw your analytics consent at any time. Withdrawal applies to future data collection and does not affect data already collected.

7. International data transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the U.S. and other countries where our servers, affiliates, or service providers are located. These jurisdictions may not provide the same level of data protection as your home country. Where required, we rely on appropriate safeguards for such transfers, including the European Commission's Standard Contractual Clauses for transfers from the EU/EEA and the UK International Data Transfer Addendum, as well as supplementary technical and organizational measures such as encryption and access controls.

By using the Service or providing information to us, you understand that your data may be transferred to and processed in the United States and other jurisdictions in accordance with this Policy.

8. Data retention

We retain information for only as long as necessary to fulfill the purposes described in this Policy, including maintaining your account, complying with legal obligations, resolving disputes and enforcing agreements, unless a longer period is required by law.

When data is no longer needed, we securely delete or anonymize it.

Analysis results (and, if applicable, associated user identifiers) may be retained indefinitely to improve the Service and provide historical results. You may request deletion at any time by contacting [email protected], subject to legal or contractual retention obligations.

9. Your privacy rights

Depending on your location, you may have the right to access, correct, delete, or receive a copy of your data in a portable format; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise your rights, contact [email protected]. We will respond within the timeframes required by applicable law. Residents of the European Economic Area or United Kingdom may also file a complaint with your local data-protection authority.

10. CCPA/CPRA disclosures (California)

This section applies solely to visitors, users, and others who reside in California. We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA).

10.1 Categories of personal information collected (past 12 months)

10.2 No sale of personal information

We do not sell personal information for monetary consideration. However, certain disclosures involving advertising technologies or third-party advertising partners may constitute "sharing" for cross-context behavioral advertising under the CCPA/CPRA, as described below.

10.3 Sharing for advertising

Advertising on the Service may be provided and managed by Playwire LLC, which may independently collect and process data for advertising purposes through its own consent management tools and technologies. We do not directly control advertising cookies, and advertising consent is not governed by our cookie banner. For more information, see the Playwire Privacy Policy.

10.4 Use of service providers

We disclose personal information to trusted service providers and contractors who act on our behalf and under contractual restrictions, including Google Analytics (site usage measurement and performance insights) and Cloudflare (security, DDoS protection, and content delivery). These providers are considered "service providers" or "processors" under the CCPA/CPRA and are prohibited from retaining, using, or disclosing personal information other than for providing contracted services to us.

10.5 Your rights (California residents)

• Right to know/access: Request details about the categories and specific pieces of personal information we have collected, used or disclosed about you.
• Right to delete: Request deletion of personal information we have collected, subject to legal exceptions.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale/sharing: Opt out of the sharing of personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information: We collect limited payment card data (last four digits and expiration date) for subscription management purposes only. This data is stored in encrypted form and processed by Paddle. We do not use this data beyond managing your subscription, and we do not sell or share it.
• Right to non-discrimination: We will not deny any goods, services, charge different prices, or provide a different level or quality of services or otherwise discriminate against you for exercising your privacy rights.

10.6 How to exercise your rights

• Email: Contact [email protected] with the subject line "California Privacy Request" or "Do Not Share My Personal Information."
• Settings (analytics): Go to the Settings menu under the Privacy section of the Service and disable Google Analytics to opt out of analytics cookies.
• Advertising (Playwire): Use Playwire's consent banner or settings to opt out of advertising cookies and personalized ads.
• Global Privacy Control (GPC): We honor GPC and treat it as a valid opt-out request for that browser.

We will verify your request and respond within the timeframes required by law. Depending on your request type, we may ask for additional information to confirm your identity. You may designate an authorized agent to act on your behalf, subject to verification.

11. Security

We implement reasonable technical and organizational safeguards to protect your information against unauthorized access, loss, misuse, or disclosure. These include encryption in transit, access controls, firewalls, periodic security reviews, and limited employee access to personal data. However, no system or method of electronic storage or transmission over the Internet is completely secure, and we cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account.

12. Breach notification

If a data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and relevant authorities without undue delay in accordance with applicable data-protection laws. Where feasible, such notice will include information about the nature of the breach, the categories of affected data, the likely consequences, and the measures taken to mitigate potential harm.

13. Children's privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from such individuals. If we become aware that we have collected personal information from a minor without parental consent, we will promptly delete that information and take reasonable steps to prevent further collection. Parents or guardians who believe a minor has provided us with personal information may contact [email protected] to request deletion, subject to verification.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we do, we will revise the "Effective" date at the top of this page. Your continued use of the Service after the posting of a revised Privacy Policy means that you accept and agree to the changes.

15. Contact

If you have any questions about this Privacy Policy or our privacy practices, please contact [email protected].