Privacy

Last updated August 12, 2026.

Deep Sleeve is an independently-run album-of-the-day blog. This policy describes what information is collected, why, how long it is kept, and what you can ask us to do with it.

Who is responsible, and how to get in touch

Deep Sleeve is operated by an individual, not a company. For anything in this policy — including a request to see or delete your data — write to hello@deepsleeve.com. That address reaches a person and is the fastest route to a human.

What is collected

Newsletter signup. Your email address; the timezone your browser reports, so the daily email arrives in your morning rather than the middle of your night; the language you were reading the site in, so it arrives in that language; and a note of which prompt you signed up from. Each subscriber also gets a random unsubscribe code, which is what makes the one-click unsubscribe link in every email work without asking you to log in.

Delivery outcomes. If an email to you permanently bounces, or you report one as spam, our email provider tells us and your address is automatically removed from the list. We record that it happened so we stop mailing you.

Accounts. If you create an account, we store your email address and a hashed password — never the password itself — and set a session cookie (muse_session) that expires after 30 days. No public account is needed to read the site or receive the newsletter.

Server logs. Ordinary web-server records: IP address, browser user-agent, and the page requested. These exist for troubleshooting and abuse prevention.

In your browser. The site stores a few small values locally on your device — your chosen language, and counters that stop the newsletter prompt reappearing once you have seen or dismissed it. These stay on your device and are never sent to us. There are no analytics, advertising, or tracking cookies of any kind.

Why we are allowed to hold it

The newsletter runs on your consent, given when you enter your address, and withdrawable at any time. Server logs and delivery outcomes are kept on the basis of a legitimate interest in keeping the site working, secure, and able to send mail that arrives.

How long it is kept

Newsletter details are kept until you unsubscribe, after which the record is retained only to make sure we do not mail you again. Server logs are rotated automatically and kept for a maximum of 30 days. Account records last until the account is deleted; sessions expire after 30 days.

Who else sees it

Your data is never sold, and it is not shared for anyone else's marketing. It is handled by a small number of providers who process it only on our instructions:

Resend delivers the newsletter and routes mail sent to our address, so it necessarily handles your email address and the contents of any message you send us. UpCloud hosts the site and its database, in Frankfurt, Germany.

Two parts of the page are loaded from other services, which means those services see your IP address when a page loads: Google Fonts (typefaces) and jsDelivr (icons). Album artwork is not in that category — covers are served from deepsleeve.com rather than fetched from Apple by your browser, so no request for artwork identifies you to anyone else.

Your rights

You can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. You can object to how it is used, and ask for it in a portable form. Write to hello@deepsleeve.com and we will act on it. If you are in the UK or EU and think we have handled your data badly, you may also complain to your national data protection authority.

Unsubscribing

Every newsletter carries an unsubscribe link, and most email apps also show their own unsubscribe button next to the sender — either removes you immediately. If neither works, reply to any Deep Sleeve email, or write to hello@deepsleeve.com, and we will remove you by hand.

Children

This site is not directed at children, and we do not knowingly collect information from anyone under 16.

Third-party links

Links to Apple Music, Spotify and YouTube lead to those services' own apps or sites, under their own privacy policies. Nothing is shared with them as a result of a click-through.

Changes

Material changes to this policy will be reflected by updating the date above.