Legal
Privacy & Policy
Your privacy matters. This page explains what data we collect, how we use it, and the rights you have over it.
Last updated: April 22, 2025
Information We Collect
When you use The Flying Decksman, we collect the following information: Registration data — your email address, username, and password (stored as a secure hash). Profile data — display name, avatar, and any optional bio or social links you provide. Purchase data — a record of tracks you have purchased, stored against your account. Listening history — tracks and mixes you have played, used to build your personal Library. Payment data — Paystack processes all payments. We do not store card numbers or full payment details; we only retain transaction references and amounts for order records. Google Sign-In — if you choose to sign in with Google, we receive your Google email address, display name, and profile picture. We do not receive your Google password. Usage data — pages visited, session duration, and device/browser type for platform analytics and troubleshooting.
How We Use Your Information
We use the information we collect to: • Operate and maintain your account and Library. • Process and verify track purchases. • Send transactional emails such as purchase confirmations and password-reset links (via Mailtrap / our email provider). • Allow artists to receive their revenue share via Paystack Subaccounts. • Improve platform performance and fix bugs using anonymised analytics. • Respond to support requests or abuse reports. We do not use your data for advertising, profiling, or sale to third parties.
Email Communications
We send emails only for: • Account verification when you register. • Password-reset links when requested. • Purchase receipts. • Important platform announcements (very infrequent). You will not receive marketing emails unless you have explicitly opted in. You may unsubscribe from non-essential emails at any time via your account settings.
Cookies & Local Storage
The Platform uses: • HTTP-only cookies to maintain your authenticated session securely (refresh token). These cannot be accessed by JavaScript. • Local/session storage for audio player state and UI preferences. • No third-party tracking or advertising cookies are used. Disabling cookies in your browser will prevent you from staying logged in.
Third-Party Services
We work with a small number of third-party services to operate the Platform: Paystack — payment processing. Subject to Paystack's Privacy Policy. Google Sign-In — optional OAuth login. Subject to Google's Privacy Policy. Mailtrap / Email Provider — transactional email delivery. Cloud hosting — our server infrastructure. Data is hosted on our VPS. We do not integrate Facebook Pixel, Google Analytics, or any advertising networks.
Data Retention
Your account data is retained for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain transaction records (typically 7 years for financial records). Anonymised, aggregated listening statistics may be retained indefinitely as they cannot be linked back to you.
Data Security
We take reasonable technical and organisational measures to protect your data: • Passwords are hashed using industry-standard algorithms; plaintext passwords are never stored. • All traffic is encrypted in transit via HTTPS/TLS. • Refresh tokens are stored in HTTP-only cookies, inaccessible to client-side scripts. • Access tokens have short expiry windows to limit exposure. • Our server and database are not publicly exposed and are access-restricted. No system is 100% secure. If you suspect a security issue, please contact us immediately.
Your Rights
You have the right to: • Access — request a copy of the personal data we hold about you. • Correction — update inaccurate information via your account settings at any time. • Deletion — request that we delete your account and associated personal data. • Portability — request an export of your purchase history and account information. To exercise any of these rights, contact us at support@theflyingdecksman.com. We will respond within 14 business days.
Children's Privacy
The Platform is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, please contact us and we will delete the account promptly.
Changes to This Policy
We may update this Privacy Policy as the Platform evolves. When we do, we will update the "Last Updated" date at the top of this page. Significant changes will be communicated via email or a prominent notice on the Platform.
Contact
For any privacy-related questions or requests, email us at support@theflyingdecksman.com. We are committed to resolving concerns promptly and transparently.
Also read our Terms of Service or learn about how artist revenue works.