Version 2.6 · Effective 28 October 2026 · Owner: BFJ Music Limited · Next review: 31 Mar 2027
This policy explains how bfjmusic.co.uk ("this site") collects and uses information. It is written in plain language rather than as a substitute for legal advice.
What we collect and why
Visitor statistics (Plausible). We count visits with Plausible Analytics, which uses no cookies and collects no personal data: it records the page, where the visit came from, and the browser and country, all in aggregate, plus a few anonymous steps such as "Checkout started" or "Account created" so we can see where journeys get stuck. None of it identifies you. See plausible.io/data-policy.
How the site is used (PostHog), only if you choose "Accept all". With your permission, PostHog (hosted in the EU) records how pages are used: pages viewed, clicks, and recordings of visits so we can see where things are confusing or broken. Form fields are always hidden in recordings, and recording pauses on My Account. It isn't linked to your name or email. Recordings are kept for 30 days. Change your choice any time with "Cookie settings" at the bottom of every page.
Sign-ins and downloads. When you sign in to your BFJ account or download music, we keep a record of when it happened and how (for example, signed in with Google, or downloaded a free track), to run and improve BFJ. We don't share it with anyone else. We keep it for 13 months, then delete it.
Account sign-in (Firebase Authentication). If you sign in — via Google or a one-time email link — we receive your name, email address and a unique account ID from Firebase Auth (Google), so you can access your account, mastering orders and store purchases.
Discord (optional). If you sign in with Discord or connect Discord to your account, Discord tells us your Discord user ID, username, display name and avatar. If you create a new account through Discord, we also receive your Discord email address (only if Discord has verified it) so we can send receipts and you can sign in by email link too. We store those profile details, the date you connected, and whether you're a member of the BFJ Discord server (and your roles there) so the site can show your community status. We never receive your Discord password, and we don't keep Discord's access token after sign-in. If you press a “Join” button and Discord asks you to allow it to “join servers for you”, we use that permission once, to add you to the BFJ Discord server only, and then discard it. If you post to #bfj-music-community from the Community page, your message is sent to Discord under your Discord name and avatar, marked “via bfjmusic.co.uk”, and we keep a short log of which messages you posted and when (not the text itself), so posts can be traced if there's a problem. You can disconnect Discord from My Account at any time, which deletes this link; Discord itself is covered by its own privacy policy: discord.com/privacy.
Orders and mastering requests (Firebase Firestore). Store purchases and mastering-service orders are stored against your account: what you ordered, order status, and any files or notes you provide, so we can deliver what you've paid for and let you view order history.
File uploads and downloads (Firebase Storage). Tracks you upload for mastering, and delivered masters/downloads (including the free giveaway track), are stored in Firebase Storage, accessible only to you and to Bluefootjai.
Payments (Stripe). Store and mastering checkouts are processed by Stripe. We never see or store your card details — Stripe handles payment data under its own privacy policy: stripe.com/privacy. If you join BFJ Early Access, Stripe processes your payment. We keep your subscription and payment records for 6 years for tax purposes.
Email signups. The newsletter and promo list forms collect your name/email to send you what you asked for (release alerts or promo access). Release alerts are sent with Resend. We keep a record of when and how you agreed to them, separate from your BFJ account, and you can switch them off at any time from Email preferences or the link in any email. Both ask you to confirm from your inbox before anything is sent; for the promo list we also note which campaign link brought you, and a promo sign-up that isn't confirmed within 14 days is deleted. The free Journey Mapping download comes with a free BFJ account. Claiming the free download doesn't add you to any mailing list unless you tick the box. If you tick it, we'll ask you to confirm by email.
Basket, alerts and suggestions. If you're signed in, your basket is saved to your account so it follows you between devices, and it's deleted if you delete your account. A basket reminder is only sent if you switch it on (we rely on your consent), at most one a week, and every reminder has a link to switch it off. If you're not signed in and ask us to email you your basket, we keep your email address with the releases in it only to email you that basket (one email, and never more than one a week), and delete both 30 days after you last asked. We don't add you to any mailing list. "Notify me" sends one email when that release goes on sale. Requests you don't confirm are deleted after 14 days, and sent ones 30 days after sending. Receipts and these emails may also show other BFJ Music releases and bundle offers, because you bought from us or asked about a release (the UK "soft opt-in"; our legitimate interest under UK GDPR). You can say no when you check out or ask to be notified, and every email that shows them has a link to turn them off. Your receipts and alerts still arrive. If you turn them off, we keep a coded (hashed) note of your email address so we keep respecting that, even if you later ask us to delete your data.
Enquiry forms. Our enquiry forms (Web Creation, partnerships, sample packs, event interest) collect your name, email and what you send us, such as a mix link, so we can reply. We keep them for 12 months after our last contact, unless they lead to an order or agreement, which we keep as described below.
Checking promo requests. When you ask to join the promo list, we look at the public page you link to, such as your SoundCloud or Mixcloud page, and record how many followers it has. Some decisions are made automatically. A drum & bass DJ or radio host with enough followers (currently 500) goes straight onto the list. A request with key details missing, for example no link, or a role or genre we don't send promos for, is declined automatically. A person decides everything else. If your request is declined automatically, reply to the email or write to info@bfjmusic.co.uk and a person will look at it again. Tell us anything you think we missed. We do this because we have a legitimate interest in sending unreleased music only to working DJs and radio hosts, which protects the music before it's out. If a person declines your request, we may email you once about BFJ Early Access, our paid way in, unless you ticked the box on the form asking us not to. Every such email lets you opt out. If we decline your request, we keep it, with the follower number and the decision, for 12 months so we can deal with a new application, then delete it. If you're on the list, we keep them while you're on it.
DJ feedback quotes. As with other promo services, comments you leave on a promo may be quoted, with your name, on this site, in press kits and on our social media. We only use your own words (sometimes shortened). If you'd rather not be quoted, tick "Don't quote me" on the feedback form, or use the "Don't quote me" link on the same promo link later; that takes any quote of yours off the site straight away.
On-site play tracking. When a track plays in the site's player, BFJ Radio or a preview button, we record the track, the date, which player it was, and whether it played for a minute or to the end. These records aren't tied to your identity or IP address, and we use them to show what's popular and compare releases. The one exception: if you're signed in, a track you listen to for a minute or more is also added to your BFJ activity (below).
Your BFJ activity (signed-in members). If you have a BFJ account, we keep a record of what you do with BFJ against that account: claiming a free track, connecting Discord, fan votes, posting to the community, listening to tracks, store and service purchases, signing up to release alerts, and, if you're on the DJ promo list under the same email, listening to and reviewing promos. We use it to award BFJ Signal Rep and badges, to see which parts of the site are useful to which kind of member, and to send you the right things. You can also tell us what brings you to BFJ (listener, DJ, producer or label); that's optional, never shown to anyone else, and you can change it in My Account. If you arrived from a campaign link, we note which one when you sign up or claim a track.
JA-i chat. To stop spam, the chat keeps a short-lived counter for each visitor, stored under a scrambled, one-way version of your IP address (never the address itself) and deleted after 30 days. Your questions are sent to our AI provider (Anthropic) to be answered; we don't keep them.
Heavy DROPr DJ (the DJ app)
Heavy DROPr DJ is our DJ software, for Mac, Windows (including from the Microsoft Store) and in your browser at bfjmusic.co.uk/dj.
Your music stays on your computer. The app reads your music where it is, or, in Safari and Firefox, keeps a copy in that browser's own storage. Your tracks, playlists, cues and recorded mixes are never uploaded to us.
Anonymous usage counts, only if you say yes. The Mac and Windows app asks when it first opens. If you say yes, it sends us one summary a day: minutes used; how many tracks were played, mixes recorded (and how long they were), mixes published and promos played; genres; which features were used; Mac or Windows; the app version; and the country from your computer's language setting, under a random number made for your computer. Never your name, email, track titles or file names, and we don't store your IP address. Turn it off in Settings at any time and we delete everything linked to that number; only anonymous daily totals remain. The browser version sends no usage counts.
Promos (optional). If you sign in to Heavy DROPr in the app to get label promos, it uses your Heavy DROPr account, as described above under Account sign-in. The label that sent a promo sees when you open, preview or download it, and any feedback you send. If you turn on "Tell labels when I play their promos out", the label also sees how many times it was played for 30 seconds or more, and whether that was in a mix or a live show. Nothing else: not when, where, or what else you played.
Send feedback (optional). If you use Send feedback in the app, we receive your message, the app version and whether you're using the app or the browser, on a Mac or Windows. Your email is included only if you type it in, so we can reply. The app's recent error messages are included only if you tick that box, with file and folder names removed first. We don't store your IP address. Feedback is deleted after 12 months, or sooner if you ask.
Going live and publishing. Your radio station details are stored on your computer, with the password locked by your computer's own encryption (the Keychain on a Mac, Windows data protection on a PC), and are only sent to your own station. To publish a mix to SoundCloud or Mixcloud, you connect your account once on that service's own page. The key it gives back passes through us already locked so only your copy of the app can open it. We delete our copy as soon as the app collects it, and the app keeps it encrypted on your computer. For SoundCloud, the app renews that key through us from time to time; we pass the new key straight back to the app and don't keep it. The mix itself goes straight from your computer to that service, under its privacy policy.
This page is a good-faith plain-English summary and not a substitute for independent legal advice. See also the Terms of Service.