Privacy policy
Last updated 26 October 2026
The short version: your music and images are never uploaded. Videos and cover art are made on your own phone or computer. We only hold the small amount of information needed to run accounts and subscriptions, and we never sell it.
Your music, images and videos
Everything you add to the video maker or cover art maker (audio, artwork, logos, background and foreground images, and the text you type) is processed only in your browser on your own device. It is not uploaded to us or anyone else, and we cannot see it. When you close the page it is gone, unless you saved the finished video or image yourself.
What we collect and why
- Visiting the site. Our host, Cloudflare, processes basic technical information such as your IP address, browser type and the pages requested. This is needed to deliver the site and protect it from attacks and bots. Lawful basis: legitimate interests.
- Visitor statistics. We use Cloudflare Web Analytics to count visits, pages, countries and device types. It uses no cookies and does not track you across other websites. Lawful basis: legitimate interests (understanding how the site is used so we can improve it).
- Accounts (once subscriptions open). If you create an account we hold your email address, a securely stored password (or your sign-in provider's details) and your subscription status. Accounts are run for us by Memberstack. Lawful basis: performing our contract with you.
- Payments (once subscriptions open). Payments are handled by Stripe. You enter your card details on Stripe's own secure page. We never see or store your full card number. Stripe shares with us the details we need to manage your subscription, such as your name, email, country and payment status. Lawful basis: contract and legal obligations (for example, keeping tax records).
- Emails and feedback. If you email us or send feedback, we receive your email address, your message and anything you include. Feedback sent from the site adds your device and browser type so we can fix bugs. Lawful basis: legitimate interests (answering you and improving the service).
Cookies and similar storage
We don't use advertising or tracking cookies, so there's no cookie banner. If you sign in, Memberstack stores a sign-in token in your browser to keep you logged in, and Stripe and Memberstack may use security checks (such as a captcha) to stop fraud. These are strictly necessary for the service you've asked for.
Who we share information with
Only the service providers that help us run Heavy Rotation, and only what each one needs: Cloudflare (hosting, security, statistics and email forwarding), Memberstack (accounts), Stripe (payments) and our email provider (to read and reply to your messages). We may also share information if the law requires it. We never sell your information or use it for advertising.
Some of these providers are based in or use servers in the United States. Where information leaves the UK, it is protected by the UK's approved safeguards, such as the UK–US data bridge or standard contractual clauses.
How long we keep it
- Account details: while your account is open, then deleted within 90 days of closing it, unless we need to keep them to resolve a dispute.
- Payment and invoice records: 6 years, as UK tax law requires.
- Emails and feedback: up to 2 years, unless still needed to help you.
- Visitor statistics: kept by Cloudflare in summary form and not linked to you.
Your rights
Under UK data protection law you can ask to see the information we hold about you, have it corrected or deleted, object to or restrict how we use it, and receive a copy to take elsewhere. Email hello@heavyrotationpro.com and we'll reply within one month. You can also cancel your subscription or close your account at any time from Account once you're signed in.
If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Children
Heavy Rotation is not aimed at children under 13, and you must be 18 or over, or have a parent or guardian's permission, to buy a subscription.
Changes
If we change this policy we'll update the date at the top, and for important changes we'll tell account holders by email.