Privacy policy.

Last updated: 7 August 2026

The short version: we collect what we need to write your song and get it to you, we don't sell it, and you can ask us to delete it. The longer version follows.

What we collect

• Commission enquiries - your name, email, optional phone number and preferred call time, the occasion and date, who the commission is for, which edition interests you, and the first story you choose to share.
• Interviews and contributions - the stories, photographs and voice messages you or invited friends and family provide. If we want to record a call, we will say so and ask first.
• Order details - your email, the occasion, and the stories and facts you tell us about the person the song is for.
• Payment - handled entirely by Stripe. We never see or store your full card details; we keep a record of what was paid for which order.
• Account sign-ins - we use passwordless magic links, so there's no password to store. A session cookie keeps you signed in after you open one.
• Checkout progress - with analytics permission, a pseudonymous browser ID, the page and offer you saw, broad device type, checkout stages, and any email you begin entering. This helps us understand where checkout fails; it is not a marketing subscription.
• Usage analytics - see “Analytics and advertising” below.

What we use it for

• Replying to a consultation request and deciding with you whether a commission is a good fit.
• Writing, producing, and delivering your song - the details you share go to the small team working on it, and nowhere else.
• Creating any agreed artwork, story book, reveal film, voice montage or physical record edition.
• Emailing you about your order: sign-in links, delivery, and revision updates.
• Restoring an unfinished checkout on the same device and diagnosing checkout errors.
• Returning-customer perks, like your encore discount code on your account page.

We don't sell your data, and we don't add you to marketing lists you didn't ask for.

Songs about other people

By nature, you'll tell us things about someone else. Share only what you're comfortable being sung about, and keep it kind - see our terms. The stories you send are used to write the song and are kept with the order so we can handle revisions.

If friends or family contribute a recording, photograph or story, they should know it is being collected for the commission. We explain how a contribution will be used when we contact a contributor directly. We do not secretly record interviews.

Share links

Delivered songs get a private, unguessable share link and QR code. The share page shows the song and its title - not your email or your order notes. Anyone with the link can listen, so share it deliberately. Email us if you want a link disabled.

Analytics and advertising

• Anonymous site totals - unless you object, we count aggregate page and checkout events to improve the site. These requests use no cookie or local-storage identifier and include no email, click ID, referrer, or advertising source. They are added straight to a daily total rather than kept as an individual journey.
• Warblepop first-party events - with analytics permission, page, offer, button, consultation, checkout and purchase stages linked by a random browser ID. A submitted consultation request is kept as an operational lead even without analytics permission, because we need it to reply to you.
• DataFast - with analytics permission, site and revenue attribution so we can see which pages and channels lead to orders.
• Google Ads and Meta Pixel - these tags load only with advertising permission, then measure whether ads work by reporting events such as page views and purchases. After a confirmed purchase, we may send Google Ads the consented ad click identifier, order reference, value and currency so the sale is attributed and deduplicated. We do not send card details or hashed email addresses for this purpose.

Your privacy choices

Optional storage starts off. Anonymous site totals run without storing or reading an identifier; choose “Reject optional”, or turn analytics off under “Customise”, to object to them too. The compact banner makes “Accept all” and “Reject optional” equally available, with separate controls for functional preferences, analytics, and advertising. You can reopen “Privacy choices” from any public page and withdraw a choice as easily as you gave it. Essential payment, security, and consent-choice storage stay available either way.

Cookies and local storage

• A session cookie when you sign in to your account (essential, expires).
• Your consent choice, kept locally so we can continue respecting it.
• With functional permission, your region/currency choice and an unfinished checkout draft (email, discount code and song count), kept for up to 30 days. A “Not now” choice suppresses the on-site reminder for 24 hours.
• With analytics or advertising permission, the measurement tools above may set their own cookies or local identifiers.
• Stripe may use storage needed to provide secure payment and prevent fraud when you open checkout.

Where it lives and how long

Orders and audio are stored on our secure cloud storage and kept so your account page keeps working and your songs stay listenable. Want an order, a share link, or everything we hold about you deleted? Email us and we'll do it.

Consultation requests and first-party activity events are pruned from the activity feed after 90 days unless the enquiry becomes a commission or we need the record to handle an ongoing conversation. Interview recordings, family contributions and production files are kept while we create, deliver and refine the commission. We can agree a shorter period for a particularly private story, and you can ask us to remove source material after delivery.

An unfinished checkout draft expires from your browser after 30 days. An unpaid server-side checkout record is normally kept for up to seven days. Before removing one, we check Stripe for a successful or still-processing payment: successful payments are recovered as orders, payments still processing are left alone, and only safely abandoned payment attempts are cancelled. Payment and support records needed for accounting, fraud prevention, disputes, or a support request may be kept longer.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. One email does it: [email protected]. We'll respond promptly - a human reads that inbox.