Privacy Policy

Effective date: 2026-06-05 · Last updated: 2026-06-05

This privacy policy describes how SoundCloudRipper ("we", "us", "our") collects, uses, and protects information when you use our service at soundcloudripper.com.

1. Information we collect

We collect only what's necessary to run your account and deliver the service:

• Account information: email address, name (optional), and phone number (optional, for SMS notifications).
• Authentication data: encrypted password hash.
• Usage data: which SoundCloud URLs you submit for download, download timestamps, file format chosen, and remaining credit balance.
• Payment data: payments are processed by PayPal and NowPayments. We store only a transaction reference (no card numbers, no crypto wallet keys).
• Attribution data: UTM parameters and HTTP referrer captured at signup to understand which sources drive new users.
• Technical data: IP address, browser user agent, and basic request logs (standard web-server logs).

2. How we use information

• To create and maintain your account.
• To process your download requests and deliver the resulting files.
• To handle billing and credit tracking.
• To send service notifications (e.g., welcome email, payment receipts) and, with your consent, promotional updates.
• To analyze aggregate product usage and improve the service.
• To detect and prevent abuse, fraud, and security incidents.

3. Audio content

We do not host, store, or redistribute the audio content you download. SoundCloudRipper routes the audio stream from SoundCloud's player to your device. Downloaded files are written directly to your local device. We do not retain copies of the audio you've downloaded.

4. Sharing of information

We do not sell your personal information. We share data only as follows:

• Payment processors: PayPal and NowPayments receive the data they need to process your transactions.
• Email delivery: transactional and marketing emails are sent through Resend.
• SMS delivery: SMS notifications are sent through Twilio.
• Hosting infrastructure: the app and database run on Railway; static assets are served via the same.
• Advertising platforms: if you arrive via an advertising campaign, basic conversion signals (event, value, currency) may be sent to that platform (e.g., Meta Pixel) so we can measure ad effectiveness.
• Legal: when required by law, court order, or to protect our legal rights.

5. Cookies and tracking

We use cookies and similar technologies for:

• Authentication (session cookies) — required to keep you signed in.
• Attribution (UTM tracking) — to understand which sources drive signups.
• Analytics (Meta Pixel) — only fired when advertising campaigns are running, to measure conversions.

You can block cookies in your browser settings, but doing so will prevent you from signing in.

6. Data retention

We retain account data for as long as your account is active. If you delete your account, we delete personal data within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent for marketing communications (reply "unsubscribe" to any email or "STOP" to any SMS).

To exercise these rights, email privacy@soundcloudripper.com (replies route to the team).

8. Security

We protect your data using:

• HTTPS / TLS for all connections.
• Password hashing with industry-standard algorithms (we never store plaintext passwords).
• Restricted database access and least-privilege credentials.
• Encrypted credential storage for sensitive fields.

No system is 100% secure. In the event of a data breach affecting your personal information, we will notify you per applicable law.

9. Children

SoundCloudRipper is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If you believe we have, contact us and we will delete it promptly.

10. International users

SoundCloudRipper is operated from the United States. By using the service, you consent to your data being processed in the US. Where applicable (e.g., GDPR for EU/UK users), we provide additional rights and protections described above.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance.

12. Contact

Questions? Email privacy@soundcloudripper.com or reach out via the support page.