Privacy

What Booth Collects

• Account and session data, including a Booth user ID, guest or registered profile status, display name, email address if you add one, account claim events, and an essential signed session cookie.
• SoundCloud data you authorize, including profile ID, username, likes, playlists, track IDs, titles, artist/profile metadata, artwork, duration, public URLs, genre, BPM, download and purchase metadata, license fields, descriptions, and publisher metadata.
• OAuth credentials for connected services, including access tokens, refresh tokens when provided, token expiration times, and granted scopes.
• Source lookup data, including pasted SoundCloud links, lookup queries, candidate store/source URLs, match evidence, confidence scores, source response metadata, latency, status, and error messages.
• Technical and support data, including server logs generated by hosting or Supabase, IP/device data those providers process, email verification delivery data, and messages you send to Booth.

How Booth Uses Data

• To create and secure guest and registered Booth workspaces.
• To connect SoundCloud, refresh authorized tokens, and import a limited library preview for source-prep workflows.
• To match imported tracks against likely source pages, store acquisition candidates, and show confidence or availability signals.
• To verify email ownership, recover or merge workspaces, respond to support/privacy/security requests, debug the beta, and prevent abuse.

Storage, Sharing, and Vendors

Booth stores product data in Supabase and uses server-side API routes for SoundCloud and acquisition lookups. Verification email may be sent through Resend when configured. Booth does not sell personal information, does not host audio files, and does not use advertising cookies in the current beta code.

SoundCloud continues to process your data under its own terms and privacy policies. Booth may send lookup requests to music source providers or public web pages when you ask Booth to resolve a track source.

Cookies and Local Storage

Booth uses an essential HTTP-only cookie named booth_session to keep your workspace available across visits. SoundCloud OAuth flows also use short-lived state cookies for security. The current app uses browser local storage only to remember whether a source link was opened. Booth does not currently use analytics, ads, remarketing pixels, or non-essential tracking cookies.

Your Controls

Use the account page to disconnect SoundCloud, export your Booth workspace JSON, or delete your Booth workspace. For correction, recovery, or requests that the account page does not cover, contact privacy@boothaudio.com from the email tied to your Booth workspace.

You can also remove Booth from your SoundCloud account settings. Provider-side data remains with SoundCloud under its own policies.

Booth is not intended for children under 13. If you believe a child under 13 used Booth, contact privacy@boothaudio.com.

Retention and Security

Booth keeps account, connection, import, and lookup data while your workspace is active or while needed for beta operations, security, debugging, or legal obligations. OAuth tokens and verification codes are high-risk data and should be treated as confidential. Report security concerns to security@boothaudio.com.