Privacy Policy
Last updated August 27, 2026
What we collect on inbl.link, why, who it goes to, and how to get it back or get rid of it. Written to describe what the product actually does rather than every hypothetical.
The short version. Creators give us an email and a username through their sign-in provider. Fans stay anonymous unless they choose to unlock a download gate — and if they do, that information belongs to the creator whose gate it was, not to us. Our analytics are self-hosted and don't use cookies or store anything that identifies you. We don't sell data to anyone, and we don't send marketing email from inbl.link at all.
1. Who this covers
inbl.link is operated by Logiciels Inbloom, a sole proprietorship registered in Quebec, Canada. This policy covers inbl.link and its staging site at v2.inbloomsound.com. The inbloomsound.com shop and community have their own privacy policy.
There are two kinds of people here and they're treated differently:
- Creators — people with an account who publish pages, releases, and download gates. We are the controller of creator data.
- Fans — people who visit a creator's page. Fans have no account. If a fan unlocks a download gate, the information they give belongs to that creator, and we only handle it on the creator's behalf. See section 4.
2. Creator information we collect
| What | Where it comes from | Why |
|---|---|---|
| Email address | Your Google, Discord, or Twitch account, through Clerk | Account identity, receipts, service notices |
| Username and display name | You choose them | Your public page address and heading |
| Avatar image URL | Your sign-in provider, or you upload one | Shown on your page |
| Discord or Twitch account ID and handle | Your sign-in provider, if you use one of those | Linking your account across Inbloom Sound |
| Terms acceptance timestamp | Recorded when you complete setup | Proof you agreed to the terms |
| Content you create | You | Bio, links, themes, gates, releases, uploaded audio and images |
| Subscription state | Polar, when you subscribe | Plan, interval, status, billing period, and Polar's customer and subscription IDs |
We do not collect your real name, address, phone number, or date of birth. We never receive or store card details — Polar handles payment entirely.
3. Fan information: analytics
We run our own instance of Umami, an open-source, privacy-focused analytics tool, on the same rented infrastructure as the rest of inbl.link. It's ours rather than a third party's: no analytics company receives your visit. It loads only on creator pages, release pages, and download gate pages — never on marketing pages, never inside the creator dashboard, and never when the page's own owner is viewing it.
It records page views, referring site, device type, browser language, approximate location, and named interactions such as clicking a link, playing a track, or copying a share link.
What it does not do:
- It does not set cookies or store anything on your device.
- It does not build a profile that follows you across websites.
- It never receives an email address, a SoundCloud handle, or any unlock information.
Your IP address is passed to our analytics server so it can work out an approximate location. It's used for that lookup and is not kept as part of the stored record. Creators see only aggregate counts — how many views, which countries, which links got clicked. They cannot see individual visitors.
Our lawful basis is legitimate interest: understanding how pages perform, using the least intrusive method we could find. Because it's cookieless and non-identifying, no consent banner is required.
4. Fan information: download gates
A download gate can ask a fan for an email address and/or a SoundCloud connection before releasing a file. This is entirely optional for the fan — if you don't want to give it, don't unlock the gate.
When a fan does unlock, we store:
- The email address, if the gate asked for one.
- The SoundCloud numeric user ID and public handle, if the fan connected SoundCloud. We do not keep their SoundCloud access token — it's used to perform the actions the creator configured and then discarded.
- Which steps were completed, and when.
- A hashed, expiring token in a cookie so the fan doesn't have to unlock the same gate twice.
We do not store the fan's IP address, browser, or the text of any comment posted to SoundCloud on their behalf.
Records from the same email address or SoundCloud account are grouped into a single person within that one creator's audience, so the creator sees one person rather than five separate unlocks. This grouping never crosses between creators.
Who is responsible for this information. The creator whose gate you unlocked is the controller of it. We store and organise it for them, and they can export it. We don't use it for our own purposes, don't sell it, and don't share it with other creators. If you want a creator to delete what they hold about you, contact them — or contact us and we'll pass the request on and help make it happen. There's more detail in our Notice for Fans.
5. Email we send
inbl.link does not send marketing email. Giving your email to a download gate does not subscribe you to anything from us. We send only essential service messages to creators — for example about billing or a security issue.
A creator may separately ask for permission to email you, shown as a clearly separate, unticked checkbox that never blocks your download. If you tick it, that permission is recorded and passed to that creator, and they are responsible for any email they send you.
6. Cookies
Every cookie we set is strictly necessary — keeping you signed in, holding a download-gate unlock, and securing the SoundCloud login handshake. We use no advertising or tracking cookies. The full list, with expiry times, is in the Cookie Policy.
7. Who we share information with
We don't sell personal information. We use these providers to run the service:
| Provider | What it does | What it receives |
|---|---|---|
| Clerk | Sign-in and sessions | Creator identity, email, sign-in provider data |
| Polar | Payments, as merchant of record | Creator email, IP address at checkout, our internal account ID |
| Railway | Hosting for our apps, database, and analytics | Everything stored by the service |
| Cloudflare (R2 and CDN) | File storage and delivery | Uploaded audio and images; visitor IPs when files are requested |
| SoundCloud | Gate connections and track playback | The fan's authorisation when they choose to connect |
| YouTube | Embedded video, where a creator adds one | Visitor IP when the embed loads. We use the no-cookie embed domain. |
| Odesli | Looking up streaming links when a creator fills a release | The release URL only. Never visitor data. |
| Resend | Delivering contact-form messages | Your name, email, and message, if you use a contact form |
We may also disclose information if the law requires it, to enforce our terms, or to protect someone's safety. If the business is ever sold or transferred, information moves with it and we'll say so beforehand.
8. Where information is stored
Our providers operate outside Quebec, including in the United States and other countries. That means your information is processed under laws that may differ from your own. We choose established providers with recognised safeguards and share only what each one needs. If you'd like details of the assessment we've done for a specific transfer, ask us.
9. How long we keep things
| What | Kept for |
|---|---|
| Creator account and content | Until you delete your account |
| Fan records from download gates | Until the creator deletes the gate or their account, or asks us to remove the record |
| Download-gate unlock tokens | Expire after 7 days; deleted within 30 |
| Analytics | Kept as long as the page exists. These are aggregate counts with nothing in them that identifies a visitor |
| Billing and tax records | Six years, as Canadian tax law requires |
Account deletions are processed in a regular batch, so allow up to 30 days for full removal including stored files.
10. Your rights
Wherever you are, you can ask us to:
- Tell you what we hold about you and give you a copy.
- Correct anything inaccurate.
- Delete it.
- Give you a portable copy of information you provided to us.
- Stop or limit a particular use, or withdraw a permission you gave.
Email [email protected] and we'll respond within 30 days. There's no charge. We may need to confirm who you are before acting, so nobody else can make a request in your name.
If you're a fan asking about a download gate, the creator holds that information and we'll pass your request to them and help them action it.
Quebec residents. Under Quebec's private-sector privacy law you also have the right to be informed of the use of your information, to have it de-indexed in certain circumstances, and to complain to the Commission d'accès à l'information du Québec. Under UK and EU law you can complain to your national data protection authority. Elsewhere in Canada you can complain to the Office of the Privacy Commissioner. We'd rather you came to us first so we can fix it.
We do not use your information for automated decisions that have a legal or similarly significant effect on you, and we don't do behavioural profiling or targeted advertising.
11. Person responsible for privacy
The person responsible for the protection of personal information is the Owner of Logiciels Inbloom, reachable at [email protected].
12. Security
Uploaded gate audio sits in a private storage bucket and is only ever reachable through a short-lived signed link issued after the gate is unlocked. Unlock tokens are stored hashed, not in the clear. We don't hold passwords — sign-in is delegated to Clerk — and we don't hold card details. Access to production systems is limited to the owner.
No system is perfectly secure. If a breach affects your information and creates a risk of serious harm, we'll notify you and the relevant regulator as the law requires, and record it in our internal register.
13. Children
inbl.link isn't intended for anyone under 13 and we don't knowingly collect their information. If you believe a child under 13 has given us information — including through a download gate — email us and we'll delete it.
14. Changes
We'll update this page when the product changes. The date at the top always reflects the current version. If a change materially affects your rights we'll give notice before it takes effect.
15. Contact
[email protected] — Logiciels Inbloom, Quebec, Canada. Privacy requests: [email protected].