Legal
LordReverb is a personal project about music production, plugins and gear, run by Salvatore Tomaselli, a private individual based in Heerhugowaard, Netherlands.
I am the data controller for all personal data processed through lordreverb.com under the General Data Protection Regulation (GDPR / Dutch AVG).
When you create an account via Clerk (our authentication provider), I receive basic identity information, name, email address and, if you sign in with Google, a profile picture from that account. You can sign in with Google or with a one-time code sent to your email address. This is used solely to identify your account and provide access to account features.
Legal basis: Contract performance (Art. 6(1)(b) GDPR).
If you create a Stack, the profile information you enter is stored and displayed publicly on your Stack page. Your page goes public the moment you press "Create my page" (the minimum is your name, a page address, a profile photo and what you do in music), and everything you add or change afterwards is saved to it automatically as you go, so it can appear on the site, and in search engines, within moments. This includes your name, username, gear setup, tools, links and any photos you choose to upload. Photos are stored and served via Cloudflare R2. You control this data entirely, you can edit or delete it at any time from your account page. The same applies to Playlist, News and Release submissions, the information you submit is stored in the same systems and under the same consent basis.
Legal basis: Contract performance (Art. 6(1)(b) GDPR), supported by your explicit consent given at submission.
Until you create your Stack page, what you have typed in the Stack form so far is saved to your account automatically, together with the step you are on, so you can leave and continue later on any device. A draft is private: it is never shown on the site, is only linked to your account, and does not include your consent tick. It is replaced by your Stack when you create your page, and deleted when you click "Start over", when you delete your account, or after 60 days without changes. You can also see it in the data download from your account page.
Legal basis: Contract performance (Art. 6(1)(b) GDPR).
If you pitch a track for a playlist, submit a release or submit news, I store what you enter: your artist name, the track, release or news title, links (for example Spotify, Apple Music, SoundCloud, Bandcamp, YouTube, your website), genre, your message or description, the release date and type where asked, and a cover image for releases and news. Cover images are stored on Cloudflare R2. Every submission is linked to your account ID so I can limit abuse and contact you about it.
Submissions are not public when you send them. They wait as "pending" until I review them by hand. If I accept one, the parts that are meant to be shown (such as artist name, title, links, description and cover image) are published on the site and can be found by search engines. Submitting something is not a guarantee that it is published, and I may reject it without a reason. You can ask me to correct or remove a submission, including a published one, by emailing info@lordreverb.com; I act on this within 30 days.
Legal basis: Contract performance (Art. 6(1)(b) GDPR), supported by the consent you give when you submit.
For every cover image, photo, text and track you submit, and for your Stack's profile photo, background image and text, I store whether you said it is your own or AI-generated, and the time you said so. I keep this as a record that the labels on the site are correct.
At the same moment I store a copy of each answer without any personal details: only the kind of item (for example "news cover"), the answer (own or AI) and the time. That copy is not linked to your name, email, account ID, username or page address, so I cannot trace it back to you and it is not removed when you delete your account. I keep it for 5 years after the answer was given, as proof that the labels were set in good faith.
Before publishing an artist's news or release, I may have the description polished with an AI tool. If I do, the artist name, release title, type, date and your description are sent to Anthropic (US), the provider of the Claude AI model. Your email address and account ID are not sent. See the AI Policy.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR): showing accurate AI labels, as the EU AI Act (Art. 50) requires, and being able to prove them.
If you email me to write for LordReverb, to partner up, or about any other collaboration, I store the email, your name and contact details, and what you tell me about whether AI was used for text, images or music. You must tell me if AI was used. I keep the email, with its date, as proof of what you told me and that you agreed to follow the AI Policy and the Terms of Service, in the same way I keep the answers and time stamps from the forms.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR): handling your request, showing that AI use was disclosed as the EU AI Act (Regulation (EU) 2024/1689) requires, and defending legal claims.
If you use the report form, I store the web address, the reason, your explanation, your email address, your name if you give it, your confirmation of good faith, and the time. I use them to review your report, to confirm receipt and to tell you my decision. Confirmation and alert emails are sent through Brevo.
Legal basis: Legal obligation (Art. 6(1)(c) GDPR), to handle notices about illegal content, and legitimate interest (Art. 6(1)(f)).
If you send a track for the Mixtape, I store your Spotify track link, the track title, your artist name, the genre and the one-line reason you add, the link to your Stack, and the time you sent it. Your track is not public until I pick it by hand. If I pick it, those details (without the genre) are shown on the site next to Spotify's player, and I may mention the track on my social media or newsletter with your artist name. I do not host your audio: the music is played by Spotify. Picking is an editorial choice, it is free and cannot be bought.
Legal basis: Contract performance (Art. 6(1)(b) GDPR), supported by the consent you give when you send the track.
On the Mixtape, the homepage and the Listen player, tracks are played with Spotify's embedded player. The player is only loaded if you have accepted marketing cookies, and only when you open the Listen player or when the page shows a Mixtape track or a playlist. Until then, you see a notice and a link to open the track on Spotify instead. When it loads, Spotify receives your IP address and may set its own cookies (see the Cookie Policy). See Spotify's privacy policy →
The submission forms use Cloudflare Turnstile and a per-account limit on how often you can submit, to keep out bots and abuse. Turnstile checks your browser when the form is submitted.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), keeping the site and the review queue usable.
The Stack form includes an optional section where you can share information about your production habits and preferences. This data is never shown publicly and is used for audience research about the music production market, product development and internal business analytics, including after any transition to a commercial entity or change of ownership. It is shared with third parties only in anonymous, aggregated form. It is deleted when you delete your account.
Legal basis: Consent (Art. 6(1)(a) GDPR).
If you subscribe to the newsletter, your email address is stored in Brevo. Subscription uses double opt-in, you are only added to the list after confirming via email. You can unsubscribe at any time via the link in every email.
Legal basis: Consent (Art. 6(1)(a) GDPR).
When you create an account, your email address and name are also stored in a separate Brevo list. That list is used only for emails about your account and about using lordreverb.com, for example a welcome message, a confirmation when your Stack goes live, or a reminder about your Stack. It is not the newsletter list, and it is never used for affiliate offers or for emails from third parties. Each email includes a way to opt out. When you delete your account, you are removed from this list.
Legal basis: Providing the service you signed up for (Art. 6(1)(b) GDPR).
When you interact with the cookie banner, a record is stored server-side, including an anonymous session ID, your consent choice, the categories accepted, a timestamp and your IP address. This is kept solely to demonstrate that consent was properly obtained.
Legal basis: Legal obligation (Art. 6(1)(c) GDPR).
I use Google Analytics to understand how the site is used and Google Ads to reach relevant audiences. Both are only active if you have accepted the relevant cookie category. Neither script loads without your consent.
Legal basis: Consent (Art. 6(1)(a) GDPR).
I do not sell your data. The following third-party processors are used to run this site:
If LordReverb is sold, merged or transferred to a new operator, personal data held by LordReverb transfers as part of that transaction. The new operator becomes the data controller and is required to honour the commitments in this Privacy Policy. You will be notified by email at least 30 days before any such transfer and will have the right to delete your account and data before it takes place.
Under GDPR / AVG you have the right to access, correct, delete, or export your data. You can exercise most of these rights directly from your account page: you can download your data as a file, and you can request deletion of your account with one button ("Request account deletion"). Your Stack stays online until I process the request, and I confirm by email once everything is removed, within 30 days. For anything else, email info@lordreverb.com and I will respond within 30 days.
You can withdraw cookie consent at any time via the cookie icon in the bottom-right corner of any page.
If you believe your data has been mishandled, you have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl.
LordReverb requires users to be at least 16 years old to create an account, in line with Dutch AVG requirements. If you believe a person under 16 has submitted data, email info@lordreverb.com and I will remove it promptly.
See the Cookie Policy for a full breakdown of which cookies are used and how to manage them.
This page will be updated if data practices change. The "last updated" date reflects the current version. Significant changes will be announced via the newsletter.
Questions? Email info@lordreverb.com.