Privacy

Who is responsible

This site is operated by Bapusaheb Patil, trading as Nuits, a Finnish sole trader (toiminimi), Business ID 3584845-8, based in Helsinki, Finland. Nuits is the data controller for the processing described here.

There is no published street address and no separate data protection officer. Privacy questions go to hi@musicbybaps.com.

The short version

Music by Baps has no login, no advertising, and no advertising trackers. If you do nothing, this site collects nothing about you beyond what is technically required to deliver a web page. Analytics only start after you press Accept in the cookie banner, and they stop again if you Reject. Session replay is off. I do not sell data or build advertising profiles.

Hosting and server logs

The site runs on Cloudflare Workers, so every request passes through Cloudflare's network before it reaches the page. To route, serve, and protect the request, Cloudflare processes connection metadata such as your IP address, the requested URL, your browser's user agent, and the time of the request. This happens for every visitor and cannot be switched off, because without it the page cannot be delivered. The legal basis is legitimate interest in running and securing the site.

Cloudflare acts as a processor for this site under its own data processing terms.

What is stored on your device

The site uses your browser's local storage for preferences that make the page work for you:

• Your analytics choice (cookie-consent), with the value analytics-acceptedor analytics-rejected, so the banner stops asking. That entry contains no identifier and is never sent to a server.
• A motion preference (bp-motion) so the footer switch can remember whether page motion is on or off.
• A short-lived page-transition colour (bp-cut-inkin session storage) used only while one page hands over to the next.

Before you answer the cookie banner, the consent key is not written. If you accept, the analytics script is loaded; it sets no tracking cookies and writes no visitor identifier of its own. If you reject, nothing further is stored for analytics. Clearing site data removes the consent entry, the motion preference, and any leftover transition value.

Analytics, only after consent

Analytics is OpenPanel, which I self-host. The tracker script is served from openpanel.nuits.net and events are sent to openpanel-api.nuits.net, operated by Nuits. Nothing is downloaded from those domains until you accept, so before that nothing is transmitted and nothing is loaded.

OpenPanel sets no cookies for tracking and stores no identifier in your browser. It works out whether two requests belong to the same visit by hashing the site, your IP address, and your browser's user agent together with a salt that is rotated daily. That hash cannot be reversed into an IP address, and it stops being linkable to you when the salt rotates.

Once you accept, the following may be processed:

• Page paths and titles within musicbybaps.com.
• Basic technical metadata such as browser, device type, screen size, language, approximate location derived from IP (where the software provides it), referrer, and timestamps. The IP address itself is not stored as a permanent record of who you are.
• Outbound link clicks (for example to Spotify), limited to the destination URL and link text.

What it does not do:

• No advertising, no ad networks, no sale of personal data.
• No session replay: I do not record your screen, clicks as a video, or form keystrokes for playback.
• No heatmaps and no automatic error reporting.
• No name, email address, or account is attached to analytics events, because the site does not ask you for one.

Because the analytics instance runs on my own infrastructure rather than a third party's, the data is not shared with an analytics vendor. I am the only person who sees it.

The legal basis is your consent. You can withdraw it at any time by rejecting in the cookie banner (use the Cookies control in the footer, or the button below) or by clearing this site's local storage. Withdrawal stops future collection; it does not undo events already recorded.

Change your analytics preference

Press the button to open the consent notice again. Accept or Reject updates the stored choice for this browser.

Change analytics preference

Contacting me

You can reach me by email at hi@musicbybaps.com. Anything you write is stored in my mailbox for as long as it is useful to have it.

Retention

Analytics events are kept in the self-hosted OpenPanel database and are not kept indefinitely. Cloudflare's logs follow Cloudflare's own retention. Email is kept as long as the conversation is relevant.

Who else sees your data

Cloudflare (hosting and network). Analytics is self-hosted, so no analytics provider receives your data. Nothing is sold, rented, or handed to advertisers. There are no advertising networks, no social media pixels, and no third-party trackers on this site.

Where data leaves the EU or EEA, it is transferred under the standard contractual clauses or another safeguard provided by the service in question.

Your rights

Under the EU General Data Protection Regulation you have rights to access, rectify, erase, restrict, and object to the processing of your personal data, and to data portability. You can also withdraw consent for analytics at any time. For analytics data held on my servers, write to hi@musicbybaps.comand I will help as far as the limited data I hold allows. Most of what is collected here is not linked to your name, so I may need more information to identify your data, and in some cases I will not be able to identify it at all.

You also have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Finland).

Children

This site is not aimed at children and does not knowingly collect data from them.

Changes

If this notice changes, the updated date above will change with it. Material changes are reflected here rather than announced individually.