Privacy Policy
Last updated 21 July 2026
This policy explains what personal data yum.codes collects and how we use it. The service is operated by Decaying Spheres, based in the United Kingdom, who is the data controller. We've tried to keep this plain rather than legalistic.
What we collect
If you create a label account, we store:
— your email address (to log you in, send password resets, and contact you about your
account);
— your chosen label name, URL name, and any Bandcamp/website links you add (these appear on your
public page);
— a securely hashed version of your password (we never store the password itself);
— the Bandcamp codes you upload and their claim status;
— if you subscribe, a Stripe customer reference and your subscription status (see "Payments"
below).
If you're a fan claiming a code, we don't ask you for personal information. Claims are recorded against the release, not against you.
How we use it
We use your data only to run the service: authenticating you, delivering codes to your fans, handling your subscription, and contacting you when necessary. We do not sell your data, and we don't use it for advertising. The service uses no third-party tracking or analytics cookies — the only cookie we set is a strictly necessary one that keeps you logged in.
Who we share it with
We use a small number of trusted providers to operate the service, and share only what's needed:
— Stripe processes subscription payments. Your card details go directly to
Stripe and never touch our servers.
— Resend sends our account emails (verification, password resets).
— Railway hosts the application and database.
Each processes data on our behalf under their own privacy terms.
Where it's stored
Your data is held in our application database and in backups we take to guard against data loss. We keep it for as long as your account exists.
Your rights
Under UK data protection law you can ask us to show you the data we hold about you, correct it, or delete it, and you can object to certain uses. Email hello@yum.codes and we'll respond within a reasonable time. Deleting your account removes your label, its releases, and its codes from our systems (backups age out over time). If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).
Changes
We may update this policy; the date at the top will change when we do.
Contact
Questions about your data? Email hello@yum.codes.