This Privacy Notice explains how rshc's archive and its operator, rshc, handle information in connection with the Site. It is intended to be clear about the actual operation of this service, but it may need to be updated when the infrastructure, features, providers, or applicable law changes.
1. Who is responsible for the information
The operator of the Site is rshc. For questions about personal information, use the feedback form or email rshcsoundcloud@gmail.com.
Where data-protection law applies, the operator is responsible for deciding why and how information is processed for this Site. No separate data protection officer is identified in this notice. If one is appointed, the relevant contact details will be added here or through a later update.
2. Information you provide
The Site may receive the following information directly from you:
- account information, including a username, password hash, display name, profile biography, avatar, website, links, colors, policy acceptance records, and other profile settings;
- posts, collections, titles, descriptions, tags, metadata, comments, reviews, favorites, reports, and other interactions;
- uploaded files, original filenames, display names, file sizes, formats, checksums, technical metadata, processing status, and derivative relationships;
- feedback messages, guest names, and the contact information you choose to include;
- copyright notices, counter-notices, privacy requests, abuse reports, and material provided to support those requests; and
- information you provide when you contact the operator outside the Site.
Passwords are processed as password hashes rather than stored as readable passwords. Do not send passwords, recovery secrets, payment information, or other unnecessary sensitive information through the feedback form.
The operator may also receive information about you from another visitor who submits a report, rights complaint, comment, or other material, and from service providers that provide technical or security information about requests to the Site.
The operator may also receive information about you from another visitor who submits a report, rights complaint, comment, or other material, and from service providers that provide technical or security information about requests to the Site.
3. Public and restricted information
Public profiles, posts, collections, comments, reviews, tags, metadata, attribution, and files are intended to be visible to other visitors. Public material may be indexed, copied, cached, downloaded, or redistributed by third parties, and the operator cannot control later copies.
Unlisted or link-accessible material is not confidential. Private or restricted material is intended to have limited visibility, but the operator and infrastructure providers may access it when reasonably necessary to provide the service, process an upload, investigate abuse, respond to a rights complaint, maintain security, or comply with law.
4. Technical and security information
The Site processes information needed to create sessions, verify requests, prevent cross-site request forgery, apply rate limits, process uploads, deliver files, prevent abuse, and maintain service reliability. This can include an account identifier, IP address or proxy-provided address, request timestamps, request paths, error details, and information about the device or browser supplied in a request.
The web server, hosting provider, object-storage provider, and other infrastructure providers may create their own operational, security, access, and billing records. Their records are governed by their own terms and privacy notices.
5. Cookies and browser storage
The Site uses an essential session cookie to keep you signed in, preserve security state, and process forms. It is configured as HttpOnly and SameSite Lax, and it is marked Secure when the deployment is configured to use HTTPS.
The browser may also store the selected theme, upload queue information, resumable upload details, and a short-lived upload lock in local storage. This allows an upload to continue after navigation or a reload. Clearing browser storage may remove that local upload state without deleting a file that has already reached the server or object storage.
The application does not intentionally add advertising cookies, behavioral tracking pixels, or analytics trackers. A third-party embedded player, link, or external service may use its own cookies or storage when you interact with it.
6. How information is used
The operator uses information to:
- provide accounts, profiles, publishing, search, comments, reviews, favorites, feeds, downloads, and file delivery;
- store, back up, transform, derive, index, display, and preserve archive material according to the Site's features;
- identify contributors and display attribution where material is public;
- respond to feedback, copyright notices, privacy requests, abuse reports, and support questions;
- protect the Site, its visitors, and its providers from fraud, spam, malware, unauthorized access, and other abuse;
- debug errors, measure reliability, investigate incidents, and maintain the database and storage systems; and
- comply with legal obligations, valid legal process, and the operator's rights.
7. Lawful bases where data-protection law applies
If a law such as the EU or UK General Data Protection Regulation applies, the legal basis for processing depends on the information and purpose. Processing may be based on providing a service you requested, taking steps at your request, the operator's legitimate interests in security and moderation, your consent where consent is specifically requested, or a legal obligation.
Information required to create an account, publish material, process an upload, or investigate a report may be necessary for that feature. If you do not provide it, the operator may be unable to provide the relevant feature. The operator does not make solely automated decisions that produce legal or similarly significant effects about visitors.
8. Storage, providers, and international transfers
The database, uploaded objects, backups, and generated derivatives may be stored on infrastructure selected by the operator, including Amazon Web Services and S3-compatible object storage. The operator may use hosting, networking, web-server, database, backup, monitoring, or delivery providers to operate the Site.
These providers may process information in countries different from the country where you live. Where applicable law requires safeguards for an international transfer, the operator will use the safeguards required for the relevant transfer or will update this notice when the arrangement changes.
When you open an external link or use an embedded service, your browser may connect directly to that provider. Examples may include video, audio, social, or media-hosting services. The operator does not control the information those providers collect.
9. When information may be disclosed
The operator may disclose information to infrastructure providers that need it to run the Site, to a person who is authorized to help operate or moderate the Site, to a rights holder or contributor when necessary to handle a complaint, or to a public authority, court, or other recipient when required or permitted by law.
The operator does not intentionally sell personal information or use private account information for unrelated advertising. The operator may disclose information during a transfer, reorganization, or sale of the Site, subject to applicable law and any required notice.
10. Retention and deletion
Account information and archive material are kept while an account or contribution is active or while they are needed to provide the service. Feedback, reports, moderation records, audit records, security records, and legal correspondence may be kept for as long as reasonably necessary to investigate issues, protect the Site, resolve disputes, comply with law, or establish or defend legal claims.
When you delete material, the application will remove or detach the copies that it is designed to remove. Copies may remain temporarily in backups, caches, provider logs, disaster-recovery systems, moderation records, or other records that must be retained. Backup copies are removed according to the applicable backup rotation and cleanup process rather than necessarily at the same moment as the public copy.
11. Your choices and rights
Depending on where you live and which law applies, you may have rights to request access to, correction of, deletion of, restriction of, or objection to certain processing of your personal information. You may also have a right to receive portable information, withdraw consent where processing is based on consent, or complain to a data protection supervisory authority.
Use the account or management pages for actions that are available there. For another request, use the feedback form or email rshcsoundcloud@gmail.com. Include enough information to identify the request, but do not send a password. The operator may need to verify your identity and may decline or limit a request where the law allows it.
12. Children
The Site is not designed to solicit personal information from children. Do not use the Site or submit personal information if you are not legally permitted to do so. If a parent or guardian believes that a child has provided information improperly, contact the operator through the contact route above.
13. Security
The operator uses reasonable technical and organizational measures appropriate to a small personal archive, including access controls, password hashing, request forgery protection, rate limiting, backups, and restricted storage access where configured. No internet service, storage provider, or transmission method is completely secure, and the operator cannot guarantee that information will never be accessed, altered, disclosed, or destroyed by an unauthorized party.
14. Changes to this notice
The operator may update this notice when the Site, its providers, its processing activities, or applicable law changes. The current version is published on this page, and the last-updated date may be shown above. Material changes will be reflected here before or when they take effect where notice is required.