Privacy policy

Effective

In short

  • You can browse Rigside without an account. With one, we keep your email, profile and what you do here: follows, saves, RSVPs, comments and messages.
  • We measure how the site and app are used, collect crash reports, and measure our adverts. Where the law needs your consent for that, we ask for it.
  • Recon, our newsletter, is only sent if you opt in, and every email has an unsubscribe link.
  • We don’t sell your personal data.
  • You can delete your account in Settings, or ask us anything at hello@rigside.app.

Who we are

Rigside is a drum and bass platform: a website at rigside.app and apps for iOS and Android. It is run by LVL99 Labs Limited, a company registered in England and Wales (company number 16484515), whose registered office is 124–128 City Road, London EC1V 2NX. In this policy, “Rigside”, “we” and “us” mean that company.

We are the controller of the personal data described here. For anything about it, email hello@rigside.app or write to us at our registered office.

What we collect and why

Your account

What
Your email address and password (stored as a one-way hash), or the identity your sign-in provider (Apple, Google or SoundCloud) shares with us; your username, display name, profile picture, cover image and the subgenres you pick.
Why
To create your account, sign you in and show your profile.
Lawful basis
Contract — it’s needed to provide the account you asked for.

What you do on Rigside

What
Artists and people you follow, tracks and videos you save or rate, crates, events you RSVP to, comments and posts, ideas and votes, direct messages, reports and blocks, feedback you send, and requests to claim an artist or event profile (with any evidence you give).
Why
These are the features themselves: we store them so they work and so you can see them again.
Lawful basis
Contract.

Listening

What
When you play a track we stream while signed in: which track, how long you listened and whether you finished it.
Why
To count plays and show listening figures.
Lawful basis
Legitimate interests — accurate play counts are central to what Rigside shows. We keep no IP address or device details with these records.

Connected SoundCloud account

What
If you connect SoundCloud: the access tokens it issues and your SoundCloud profile ID.
Why
To act on SoundCloud for you when you ask — for example, to turn an event’s lineup into a playlist on your account.
Lawful basis
Contract. Disconnect at any time in Settings.

Notifications

What
A push token for your device, your notification preferences, and — for a direct message — the sender’s name and the start of the message, shown in the notification.
Why
To send the notifications you’ve turned on.
Lawful basis
Contract. Turn them off in the app’s notification settings or your device settings.

Location

What
In the app, with your permission, your device’s location. On the website, an approximate location (country and city) that our host derives from your IP address.
Why
To show events near you and how far away they are. The app uses your location on your device; neither is stored by us.
Lawful basis
Consent (the app’s location permission, which you can withdraw in your device settings); legitimate interests for the approximate location on the website.

Usage analytics

What
Pages and screens viewed, actions such as plays, saves, shares and searches, the site that referred you, your device and browser type, and approximate location. Recordings of how pages and screens are used (session replay), with what you type hidden. If you’re signed in, these are linked to your account.
Why
To understand what people use, find what’s broken and decide what to build.
Lawful basis
Legitimate interests; and your consent where the law requires it for cookies and similar technologies (see Cookies).

Crash reports

What
When the app crashes or hits an error: the error, your device model, operating system and app version.
Why
To find and fix faults.
Lawful basis
Legitimate interests.

Advertising measurement

What
On the website: that a browser visited, which pages, and identifiers set by Google, Meta and TikTok.
Why
To measure whether our adverts on those platforms bring people to Rigside, and to show our adverts to people who have visited.
Lawful basis
Consent.

Recon, our newsletter

What
Your email address, a record of your consent (when, where and the wording you agreed to), and whether you open our emails and click their links.
Why
To send Recon, prove you asked for it, and see which parts readers use.
Lawful basis
Consent. See Recon, our newsletter.

When you contact us

What
Your email address and what you write.
Why
To reply and deal with your request.
Lawful basis
Legitimate interests.

We don’t use your data for decisions made solely by automated means that have legal or similarly significant effects on you.

Recon, our newsletter

Recon is a regular email about what’s moving in drum and bass. We only send it if you opt in, and we don’t add you because you have an account. When you opt in, we record when and where you did and the wording you agreed to.

Recon’s emails contain a small image and tracked links that tell us whether an email was opened and which links were clicked. You agree to this when you opt in.

To stop receiving it, use the unsubscribe link at the bottom of any issue, turn it off in the app’s settings, or email hello@rigside.app. Unsubscribing stops the emails and the tracking; we keep your address on a do-not-email list so we don’t email you again.

Cookies and similar technologies

Cookies are small files a website stores in your browser; the app uses similar storage on your device. We use three kinds:

Essential
Keeping you signed in (a Supabase session cookie) and remembering settings you choose, such as player volume or a dismissed banner. These are needed for the site to work, so they don’t need consent.
Analytics
PostHog, Ahrefs and Umami, which measure how the site is used.
Advertising
Google (via Google Tag Manager and Google Ads), Meta Pixel and TikTok Pixel, which measure our adverts and let us show them to people who have visited.

We only set analytics and advertising cookies with your consent, which you can give or refuse when you first visit and change at any time. Withdrawing it clears the cookies those tools set. You can also clear or block cookies in your browser.

Who we share it with

We don’t sell your personal data. We use these providers to run Rigside; they process it for us, under contract, and only on our instructions:

Supabase
Database, sign-in and file storage (London, UK).
Vercel
Hosting the website (London, UK region).
PostHog
Product analytics and session replay (EU).
Sentry
Crash and error reports from the app.
OneSignal
Push notifications and email, including Recon. Push is delivered through Apple’s and Google’s notification services.
Resend
Account emails, such as confirming your address or resetting your password.
Google Workspace
Our email, when you write to us.
Ahrefs, Umami
Website analytics.

Some organisations receive data as controllers in their own right, under their own privacy policies:

Apple, Google, SoundCloud
When you sign in with them or connect SoundCloud.
Google, Meta, TikTok
Advertising measurement on the website, with your consent.
YouTube, SoundCloud, Spotify, Apple Music
When you play their embedded players. On the website, YouTube videos load from youtube-nocookie.com, and only when you press play.
Stadia Maps, Apple Maps, Google Maps
Map images on venue and event pages, loaded from their servers.
Expo
Delivering updates to the app.

We may also disclose data if the law requires it, to protect people’s safety, or to a buyer if Rigside is sold — in which case this policy would continue to apply to it.

International transfers

Our main database is in the UK. Some providers above are based in, or process data in, the United States or elsewhere outside the UK. Where they do, we rely on the UK’s adequacy regulations — including the UK Extension to the EU–US Data Privacy Framework for certified US companies — or, where those don’t apply, the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Ask us for details of a particular transfer.

How long we keep it

Account and activity
For as long as you have an account. When you delete it, it is erased within 30 days.
Messages you sent
Deleting your account removes your name from messages in conversations with others; the messages stay visible to them.
SoundCloud connection
Until you disconnect it or delete your account.
Usage analytics
Up to 24 months.
Session replays
Up to 30 days.
Crash reports
Up to 90 days.
Recon
Until you unsubscribe. We keep the record of your consent for 2 years after that, to show it was given, and your address on our do-not-email list for as long as we send email.
Emails to us
Up to 2 years after we’ve dealt with them.

Your rights

Under UK data protection law you have the right to:

  • get a copy of the personal data we hold about you;
  • have it corrected if it’s wrong, or erased;
  • restrict or object to how we use it, including any use based on our legitimate interests;
  • receive the data you gave us in a portable format;
  • withdraw consent at any time — this doesn’t affect anything we did before you withdrew it.

Email hello@rigside.app to use any of these. We’ll reply within one month, and we may ask you to confirm who you are first. Most of your profile you can change yourself in Settings.

Deleting your account

Delete your account in Settings, on the website or in the app. It signs you out and erases your account and activity within 30 days, apart from what’s described under How long we keep it. You can also ask us to do it by emailing hello@rigside.app from the address on your account.

Children

You must be 13 or older to create an account. If you think a child under 13 has given us their data, tell us at hello@rigside.app and we’ll delete it.

Security

Data is encrypted in transit, access to the database is restricted by account-level rules, and only the people who run Rigside can reach it. No system is perfectly secure; if a breach puts your rights at risk, we’ll tell you and the ICO as the law requires.

Content on Rigside

Rigside brings together publicly available tracks, videos and events from services such as SoundCloud, YouTube and Resident Advisor. That content, including artwork and flyers, belongs to its owners; some images load directly from those services, and links out are governed by those services’ own policies.

If you own something shown on Rigside and want it removed, email hello@rigside.app with the details and we’ll act on it promptly.

Changes to this policy

When we change this policy we’ll update it here with a new effective date, and tell you by email or in the app if the change is significant.

Contact and complaints

Email hello@rigside.app, or write to us at 124–128 City Road, London EC1V 2NX.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put it right first.