Overview
Finalthief Music operates this website without first-party analytics, behavioral tracking, or advertising pixels. We do not build visitor profiles, sell personal information, or use cookies for cross-site tracking.
Information we do not collect
We do not ask you to create an account to browse this site, and we do not log your activity for marketing or personalization purposes. If you join the release list or sign a guestbook, the sections below explain what we keep.
Release list (newsletter)
If you join the release list on the home page or the contact page, we keep the email address you enter, your name if you give one, the list you joined (all of Finalthief Music, or a single artist), the page you joined from, and the date. To stop automated spam signups, we also keep a short one-way hash of your IP address with each signup. We never store the IP address itself.
We use your address only for what the list is for: new releases, premieres, events, and news. We never sell it or share it with advertisers. Signups are stored in our Supabase database. When we send email, we use Brevo, our email delivery service, which receives your email address, your name if you gave one, and the list you joined.
Every email includes an unsubscribe link. To have your signup deleted entirely, write to support@finalthief.com from the address you signed up with, and we will delete it within 30 days.
Guestbooks
If you sign the guestbook on an artist’s profile, the name and note you enter are stored and shown on that profile. To limit spam, we keep a short one-way hash of your IP address with each note, never the address itself.
Purchases (Stripe)
If you choose to support a release through checkout, payment is processed by Stripe. Card and payment details are handled entirely by Stripe under their terms and privacy policy; we do not store your full payment credentials on this site.
Email contact
When you email us from the contact page, you choose what to include in your message. We use that correspondence only to respond, and we never add your address to the release list unless you join it yourself.
Technical hosting
Like any website, our hosting infrastructure may generate standard server or security logs (for example, to operate and protect the service). That processing is limited to what is typical for running the site and is not used for targeted advertising or user tracking by us.
Finalthief Music app (iOS)
The sections below cover the companion mobile app published on the Apple App Store. The app is completely free: it has no in-app purchases, subscriptions, or paywalls, and it never asks for or processes payment of any kind. Every track plays without an account. The Stripe section above applies only to checkout on this website, never to the app.
What the app collects
Account data (only if you choose to sign in with Apple, which is optional): your Apple ID identifier, the email Apple shares (which can be Apple’s private relay address), and the name Apple sends on your first sign-in. Stored in our Supabase database.
Favorites and playlists: the IDs of tracks you have hearted and the playlists you build. Stored on the device when signed out, and synced to your account when signed in so they follow you across devices.
Push tokens: if you turn on new release alerts, the operating system gives us an opaque push token tied to that app install. We use it solely to deliver the release announcements you opted into.
What the app does not collect
We do not collect payment information, contacts, photos, location, microphone, calendar, health data, or browsing history. We do not embed analytics or third-party advertising SDKs, and the app contains no ads.
We do not track you across other companies’ apps or websites. The app does not request the iOS App Tracking Transparency permission because we do not share your data with data brokers or use it for cross-app advertising. We do not sell, rent, or lease your data to anyone, ever.
Who the app shares data with
Supabase (database + authentication), Cloudflare R2 (our own audio + image hosting), Apple (Sign in with Apple and push delivery), and Expo (push relay between us and Apple’s APNs). Each receives only the data necessary for its role. We do not share your data with anyone else.
Offline downloads
Tracks you download for offline listening are saved in the app’s private, sandboxed storage on your device, which iOS encrypts at rest. They are never uploaded anywhere, and no other app can read them. Removing the app removes all downloaded files.
Your controls in the app
Sign out from the More tab to clear the account session on the device; your favorites and playlists stay in your account. Turn new release alerts on or off from More → Notifications, or from iOS Settings → Notifications → Finalthief Music.
Account deletion: while signed in, tap More → Delete account and confirm. This permanently and immediately deletes your account along with the data tied to it: your profile, favorites, playlists, and push tokens. If you would rather email us, write to support@finalthief.com from the address tied to your account and we will delete it within 30 days.
Children
Finalthief Music is rated 12+ on the App Store. We do not knowingly collect data from children under 13.
Changes
We may update this page from time to time. The “last updated” note below will change when we do.
Last updated: November 9, 2026