← Back to Bandloop

Privacy Policy

Last updated: July 6, 2026

1. Overview

Bandloop ("the Service") is a band management web application. This policy explains what information we collect, how we use it, and with whom we share it.

Bandloop uses YouTube API Services to help you find official music videos for songs in your catalog. By using Bandloop, you also agree to be bound by the YouTube Terms of Service and the Google Privacy Policy (available at https://www.google.com/policies/privacy).

2. Information We Collect

When you use Bandloop, we collect and store the following information:

  • Account information: Your name, email address, and profile picture provided by Google when you sign in via Google OAuth.
  • Band data: Songs, setlists, gigs, venues, payments, and related content you and your bandmates create within the app.
  • Venmo handles: Venmo handles you optionally provide for splitting gig payouts between bandmates.
  • Subscription & billing information: If you subscribe to Bandloop Pro, payments are handled by our payment processor, Stripe. Stripe collects your payment card details directly — we never receive or store your full card number. We store only a Stripe customer identifier, a subscription identifier, your plan status, and your renewal date so we can manage your subscription.
  • YouTube API data: When you add a song to your catalog, Bandloop queries the YouTube Data API (via a server-side API key) for the official music video matching the song's title and artist. We store only the resulting YouTube video ID (an opaque identifier such as dQw4w9WgXcQ) against the song record so the video can be embedded later. We do not collect or store YouTube view counts, like counts, comments, channel subscriptions, or any other YouTube statistics.
  • Device storage: For offline support, Bandloop caches your band's songs, setlists, and lyrics in your browser's IndexedDB and Service Worker cache. This data stays on your device.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Bandloop service
  • Authenticate your identity via Google OAuth
  • Enable collaboration between you and your bandmates
  • Look up song metadata (BPM, lyrics, official music videos) from third-party services on your behalf
  • Embed YouTube videos within the app so you can preview or rehearse with songs in your setlist

4. How We Share Your Information

We share your data only in the following cases:

  • With your bandmates: Songs, setlists, venues, gigs, and money records are shared with other members of the same band.
  • Via public share links you create: Shareable setlist pages, gig calendar links, song catalog pick links, and gig confirmation pages you generate are accessible to anyone holding the link.
  • When required by law.

We do not sell, trade, or rent your personal information, nor do we share YouTube API data with advertisers or external parties.

5. Third-Party Services

Bandloop integrates with the following third-party services:

  • Google OAuth: For authentication. We receive your name, email, and profile picture. Governed by the Google Privacy Policy.
  • YouTube API Services: To find and embed official music videos for songs in your catalog. Subject to the YouTube Terms of Service and the Google Privacy Policy.
  • iTunes Search API: To search for song metadata (title, artist, duration, album art).
  • Deezer API: To look up BPM (tempo) information for songs.
  • LRCLIB: To fetch song lyrics (plain and time-synced).
  • Spotify API: Optional integration for playlist export, only if you choose to connect your Spotify account.
  • Stripe: Payment processing for Bandloop Pro subscriptions. Stripe collects and processes your payment details directly. Governed by the Stripe Privacy Policy.
  • Google Places API: To look up venue information when adding venues.
  • PostHog: Product analytics. Events are proxied through our own domain.

6. Data Storage, Retention, and Security

Your data is stored in a PostgreSQL database hosted on Neon. All data in transit is encrypted via HTTPS.

We retain your data until you request deletion or delete your account. YouTube video IDs stored against songs are refreshed on demand; we do not retain YouTube statistics of any kind.

You may revoke Bandloop's access to your Google account at any time via the Google security settings page.

7. Cookies and Local Device Storage

Bandloop stores and accesses information on your device in the following ways:

  • Cookies: We set essential cookies to maintain your authenticated session (JWT session cookie). We do not set third-party tracking cookies.
  • IndexedDB: The Bandloop service worker caches your band's songs, setlists, and lyrics in IndexedDB so the app works offline.
  • localStorage: Used for UI preferences (e.g., dismissed dashboard cards, last-selected band).
  • Service Worker cache: The app shell (HTML, JavaScript, CSS, fonts) is cached for offline use.

You can clear all of this by clearing site data for bandloop.net in your browser settings.

8. Your Rights

You may:

  • Request deletion of your account and all associated data by contacting us at the address below.
  • Disconnect third-party integrations (e.g., Spotify) at any time through Settings.
  • Revoke Bandloop's Google permissions via Google Account settings.

9. Children's Privacy

Bandloop is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the app.

11. Contact

If you have questions about this privacy policy, or wish to request data deletion, please contact us at [email protected].