privacy_policy.txt — Notepad

Privacy Policy

Last updated: October 8, 2026

This policy explains what Burn CD ("we," "us," "the site") does with information when you make and share a virtual CD. The short version: we collect as little as we can, we don't sell anything, and we never profile you across the web.

1. The data we don't collect

It's easier to start with what we don't have:

  • No accounts. There's no sign-up, so we never have your email, name, or password.
  • No ad ID or tracking pixels of our own. The only advertising on the site is served by Google AdSense, and exactly what that involves is disclosed in section 3.
  • No full payment profile. The site is free, so there's no card data and no billing record.

2. The data we do process

To make a CD and share it, the site has to handle a small amount of information. Here it is, plainly:

  • The tracks and note you enter. When you finish a disc, the track IDs and the note you wrote are encoded into the share link itself. We store that encoded disc so anyone with the link can open it — and we can read its contents if we have to (for example, to delete it at your request).
  • Sound preference. Whether you've muted the interface effects is saved in your browser's local storage. It never leaves your device.
  • Basic, aggregated usage data. We may look at coarse, anonymized counts — roughly how many discs get made, which pages are visited — to keep the site running. This isn't tied to you as an individual. We use Google Analytics for these counts; see section 3 for what that means, including the cookies it sets.
  • Server logs. Like any hosted site, our infrastructure may log an IP address or request timestamp for a short period to operate securely and fend off abuse. These aren't used to build a profile of you.

3. What third parties see

The music comes from Apple Music's catalog. When you search, and when a recipient plays a disc, the relevant track metadata and short previews are fetched from Apple. That exchange is governed by Apple's own privacy practices — we don't control it and can't see what Apple does on its side. We also rely on a hosting provider to serve the site; that provider processes only what's needed to keep pages loading.

Google Analytics

We use Google Analytics to understand aggregate usage — which pages are read, roughly where visitors come from, and how the site performs. Google Analytics sets cookies on your device (for example _ga, and a client ID) to tell repeat visits apart. This data is sent to Google and processed under Google's privacy terms; Google may use it to provide and improve its measurement products. We keep Google Analytics for measurement only, with its advertising features switched off. You can block these cookies through your browser's cookie settings or via Google's ads settings opt-out tool, and more detail is available in Google's privacy policy.

Advertising (Google AdSense)

The site displays ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site or other websites. If you are in the European Economic Area, the United Kingdom, or a region with similar laws, you will be asked for consent before any advertising cookie is set, and nothing non-essential is stored until you agree. Wherever you are, you can opt out of personalized advertising via Google's Ads Settings and manage cookies through your browser's settings. Google's page on how Google uses data on partner sites spells this out in more detail.

4. Shared CDs are link-visible

Anyone who has the share URL can open that CD. We don't guess who's "allowed." So treat the note and the track list as something a stranger could read if they got the link — don't put passwords, home addresses, or anything else sensitive in a disc. If you want a disc gone, see the next section.

5. Controlling and deleting your data

You can clear your sound preference any time by clearing site storage in your browser. To remove a shared CD, email support@burn-cd.org with the link and we'll delete it. We'll act on legitimate removal requests without undue delay.

6. Children

Burn CD isn't directed at children under 13 (or the local equivalent), and we don't knowingly process their data. If you believe a minor has created or received a disc that shouldn't exist, contact us and we'll remove it.

7. Changes to this policy

If we change what we do with data, we'll update this page and bump the date at the top. For anything that meaningfully expands how we use information, we'll call it out clearly.

8. Contact

Questions about this policy go to support@burn-cd.org. We're happy to clarify anything that reads ambiguously.

← Back to Home