Privacy Policy
Last updated: December 26, 2025
1. Introduction
Welcome to unraveled.fm. This Service is owned and operated by Cosmic Jellyfish, LLC ("we," "our," or "us"). We provide a platform for music enthusiasts to visualize their personal fandom, identify discovery milestones, and engage with artist insights.
This Privacy Policy explains how we collect, use, store, share, and safeguard your information when you use our website, applications, and related services (collectively, the "Service").
2. Information We Collect
We collect information you provide directly, data generated through your use of the Service, and limited metadata from third-party sources.
Account Information
We collect your name, email address, and authentication credentials through our identity provider, Supabase, for account creation, login, and support.
User-Uploaded Data
You may manually upload music listening history files (such as Spotify JSON or Apple Music CSV exports). By uploading these files, you represent and warrant that you have the legal right to share this data with us.
Uploads are entirely user-initiated. We only process files you explicitly choose to provide.
Direct API Data (Optional / Future)
If, in the future, you choose to link a third-party music account via OAuth, we may collect listening activity directly from supported third-party APIs (e.g., Spotify Web API). Account linking is optional and not required to use the Service.
Unraveled is not affiliated with, endorsed by, or sponsored by Spotify, Apple, Google, or YouTube.
Metadata Enrichment
To generate accurate insights, we enrich uploaded listening data with public, non-personal metadata from third-party services such as iTunes, MusicBrainz, and Soundcharts. This metadata includes artist names, genres, and release dates and does not include personal listening data. These services do not receive your personal listening history.
Usage & Analytics Data
We automatically collect limited usage information such as device type, pages viewed, feature interactions, and performance data. This data is used in aggregate to improve the Service.
3. How We Use Your Information
We use your information to:
- Generate your personalized Unraveled Story
- Compute fandom, discovery, and listening insights
- Create personalized statistics, visualizations, and share cards
- Enable social and collaborative features you explicitly authorize
- Maintain, improve, and secure the Service
- Communicate with you about your account or service updates
- Detect, prevent, and address fraud or abuse
- Comply with legal obligations
Artist Insights & Direct Sharing (Opt-In Only)
If you explicitly opt in to support a specific artist, campaign, or program, we may share limited information—such as your email address and relevant listening milestones (e.g., discovery dates or "Top Listener" status)—with that artist and their authorized management or label partners.
This sharing is strictly voluntary, requires your active consent, and can be revoked at any time.
4. Data Sharing and Disclosure
Cosmic Jellyfish, LLC does not sell your personal information.
We only share information in the following circumstances:
- With Your Consent: For artist-sharing or social features you explicitly enable
- Service Providers: Trusted vendors who support our operations, including:
- Supabase (database & authentication)
- Mixpanel or PostHog (product analytics)
- Resend (email communications)
- Soundcharts (music metadata)
- Legal Necessity: When required to comply with applicable law or protect the rights and safety of users or the public
All service providers are contractually restricted from using your data for purposes beyond providing services to Unraveled.
5. Your Rights and Choices
You have the ability to manage your data directly within the Service.
Consent Controls
You may opt out of artist sharing, social features, or similar data uses at any time through your account settings.
Data Access & Portability
You may request access to or a portable copy of your personal data.
Data Deletion
You have the "Right to be Forgotten." You may request deletion of your account and associated personal data at any time.
Global Privacy Control (GPC)
unraveled.fm honors Global Privacy Control (GPC) signals and will automatically opt you out of non-essential tracking where applicable.
6. Cookies & Tracking Technologies
We use essential cookies and similar technologies to authenticate users, maintain sessions, and ensure core functionality of the Service.
We may use privacy-focused analytics tools such as Mixpanel or PostHog to understand aggregate usage patterns. We do not use cookies or tracking technologies for advertising or cross-site tracking.
7. Data Security and Retention
We use industry-standard security measures provided by Supabase, including encryption at rest and in transit.
Raw uploaded listening files are retained only for the duration of the parsing process. Once your Unraveled Story is generated, raw files are deleted, and only structured insights are retained to provide the Service.
We retain personal data only as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations.
8. Children's Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that such data has been collected, we will delete it promptly.
9. International Users
If you are located outside the United States, your information may be transferred to and processed in the United States.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data based on your consent, the performance of our contract with you, and our legitimate interests in operating and improving the Service.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: