Privacy Policy

Last updated: 8 June 2026

1. Who we are

Repertoire (“we”, “us”) is a community classical-music rating and discovery service. For privacy questions or to exercise your rights, contact privacy@repertoire.fm.

2. Personal data we collect

We collect only what we need to run the service.

When you create an account

Email address
Display name and username
Password (stored as a salted hash; never visible to us)
Optional profile information you provide: bio, avatar, locale, time zone

When you sign in or use the site

A session token (in a strictly-necessary cookie)
IP address and browser user-agent string, recorded against your active session for security and abuse prevention

Content you create

Ratings, reviews, lists, collections, listening-log entries, and any other contributions you publish through the service. You choose the visibility of each item (public, members-only, or private).

We do not run analytics or advertising trackers, do not collect location data beyond IP, and do not buy data about you.

3. Why we use your data and on what legal basis (UK GDPR)

To provide your account and the service— performance of our contract with you (Article 6(1)(b)).
To keep the service secure and prevent abuse— our legitimate interests (Article 6(1)(f)) in operating a safe community.
To send essential service emailssuch as email verification and password reset — performance of our contract.
To comply with legal obligations— where applicable.

We do not send marketing emails or use your data for profiling.

4. Cookies

We use only strictly-necessary cookies for authentication. See the Cookie Policy for details.

5. Sharing

We do not sell personal data. We share data only with service providers we need to run the service — for example, our hosting and database providers, used to store and serve your account data and content. A current list of subprocessors is available on request from privacy@repertoire.fm. We will update this policy if we add a new category of recipient.

6. International transfers

Some of our service providers may process data outside the UK. Where that happens, we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision, as appropriate.

7. How long we keep your data

Account and profile data— for as long as your account exists.
Session records(IP address, user-agent) — for the lifetime of the session and a short period afterwards.
Your contributions — kept while your account exists. If you delete your account, we delete your account, your profile data, and the ratings and reviews you have posted. A work’s aggregate statistics (such as its overall average score) are recalculated without your ratings. If you want only a specific contribution removed rather than your whole account, email privacy@repertoire.fm.
Operational backups— may persist for up to 30 days after deletion before they cycle out.

8. Your rights

Under UK GDPR, you have the right to: access the personal data we hold about you; ask us to correct inaccurate data; ask us to delete your account and personal data (subject to the retention rules above); export your data in a portable format; and object to or restrict certain processing.

You can exercise these rights by emailing privacy@repertoire.fm. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Repertoire is not intended for children under 13. Do not create an account if you are under 13. If we learn that we have collected data from a child under 13 without parental consent, we will delete it.

10. Security

We take reasonable technical and organisational measures to protect your data, including hashed password storage, HTTPS for all traffic, and access controls on our infrastructure. No service can be 100% secure.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent change. Material changes will be notified through the service.

12. Contact

Questions or requests: privacy@repertoire.fm.