Privacy Policy

Ocean Curates · music.scfo.de

1. Scope

This policy covers this website (music.scfo.de) and the internal release-management tool operated by Ocean Curates. The tool is single-tenant software used only to manage the label’s own catalogue; it is not offered to third parties and has no user accounts.

2. This website

  • There is no analytics, no tracking pixel, no advertising network and no A/B testing on this site.
  • No cookies are set for tracking, profiling or marketing. The site sets no cookies of its own at all.
  • Fonts are self-hosted. Loading a page here does not send your IP address to Google Fonts or any other third-party CDN.
  • Our hosting provider processes standard server request data (IP address, timestamp, requested URL, user agent) in short-lived server logs for the purpose of delivering the site and defending against abuse. This is technically necessary operation of the service.

The one exception to “no third-party requests”: our AI provenance document is served from cdn.scfo.de. Following that link contacts that host.

3. The OAuth callback endpoint

The endpoint at /api/oauth/toolost/callback exists so that our distributor can redirect back after the operator authorises the label’s own account. It reads the code, state and error parameters from the URL, renders them into a page for the operator to copy, and does nothing else. It:

  • does not store the authorization code or any other parameter;
  • does not write to a database or a log we retain;
  • does not perform the token exchange and holds no client secret;
  • responds with Cache-Control: no-store so the value is not cached by intermediaries.

4. Access tokens

OAuth access and refresh tokens belong to the operator’s own distributor account. They are held server-side / on the operator’s own machine, outside this website’s public surface, and are used solely to create and deliver Ocean Curates’ own releases. They are never shared, sold, or used on behalf of any other person or company.

5. Third-party user data

We do not collect, process, or store personal data belonging to any third-party end user. We have no customers, no artists other than our own projects, and no user base.

6. Contact by email

If you write to us, your message and email address are processed for the sole purpose of replying, and are kept only as long as needed for that correspondence.

7. Your rights

Under the GDPR you may request access to, correction of, or erasure of personal data we hold about you, object to processing, and lodge a complaint with a supervisory authority. Given the above, in practice the only data we are likely to hold about you is email correspondence you initiated.

8. Contact for data requests

hello@scfo.de

The responsible entity under Art. 4(7) GDPR is the operator named in the Impressum.

← Back to Ocean Curates
Edit with