Privacy
Last updated: 2026-07-30
What this site is
Random NEXT Productions is a music label site. Visitors browse and listen to releases from the artists on our roster. There are no user accounts and no signups. If you react to a song or send us written feedback, we may publish a few of your words on that song's page, but only if you allow it and we choose to feature it. If you reach out through our work-with-us form, that form asks for an email address so we can reply. Otherwise, just listen.
Information collected automatically
The web server records standard request logs (IP address, user-agent string, requested URL, timestamp, response status). These logs are retained for 30 days and used only for security monitoring and rate-limiting.
Page-level analytics are provided by Umami, self-hosted on a sibling subdomain we operate ourselves. Umami is cookieless and aggregates traffic with no personal identifiers.
Playback events on songs are logged to our own database (which track was played, how far the listener got, when they paused, when they sought to a different position, when a track was downloaded, and when a link out to a streaming platform was clicked). Each event is enriched with: the country derived from the IP at request time, a coarse device class derived from the user-agent (mobile / tablet / desktop), and a daily-rotating salted SHA-256 hash of IP + user-agent used to estimate session uniqueness. The raw IP and user-agent are read at request time and immediately discarded — only the hash, country, and device class are stored. The session hash rotates each calendar day, so that hash on its own cannot connect events from different days. One security exception: requests that trip our download rate-limit (automated bulk-downloading of tracks) are recorded in full — including the raw IP address and user-agent — in a staff-only security log, retained for at most 30 days and used solely to protect the service against abuse. Separately, if a single session downloads an unusually high number of tracks in one day, an automated summary is sent to the site operator by email and Telegram for abuse monitoring; that summary contains only the pseudonymous session hash, country, device class, and which tracks were downloaded — never the raw IP address or user-agent, because those requests were not blocked and so fall outside the security exception above.
To understand listener loyalty — how many people come back, and how much of the catalogue they explore — we also store a persistent first-party visitor marker alongside each playback event. This is a random identifier (rp_vid) generated in your browser and kept in its local storage; it lets us recognise a returning browser across days. It is not tied to your name, email, or any contact detail — we cannot reach you through it, and it is never shared with anyone or used across other websites. We use it only to count loyalty in aggregate. See Cookies and local storage below for how to switch it off.
Each song page offers two reaction buttons, and the totals for each are shown publicly on that song's page. Tapping one records a single row noting the reaction type and the time it happened; no column in that row links it to you or to any visitor identifier. Switching from one reaction to another records two such rows: one removing the old reaction's count, one adding the new. After reacting you may also send written feedback to the artist. That is entirely voluntary. If you do, we store your words, the optional first name you give, the reaction you tapped (if any), which track it was about, and when. We store the text as you typed it, apart from tidying: surrounding blank space is trimmed, and any HTML tags and invisible control characters are removed. Your feedback stays internal to the label and the artist unless two things are both true: you ticked the box allowing us to feature your words and name, and we then chose to feature them on the song page. The notification that tells us feedback arrived is relayed through Telegram, a third-party messaging service; see Third parties below. Email us anytime and we will delete or unfeature it. None of this is linked to your listening history, your session, or the loyalty marker described above. Notes sent through the older artist-note card that existed before this feature are kept under the same promise they were given: internal only, never shown publicly, deletable on request. Because reactions and feedback are content you choose to send rather than tracking, they work the same whether or not Do Not Track or Global Privacy Control is set.
Cookies and local storage
No cookies on public pages, unless you react to a song, send feedback, or submit the work-with-us form: each of those sets a single standard Django CSRF cookie at that moment to protect the form. Nothing is set just for browsing. The administrative area at /console-7f3a/ uses standard Django session cookies for the admin login — those cookies never reach public visitors.
We keep a few fixed items in your browser's local storage, plus one small entry per song you react to, and another per song you send feedback on. The fixed items are the loyalty marker rp_vid described above (which also holds your opt-out setting, if you set one), and settings that hold no identifier of any kind and are never sent to us: player.volume and player.continue, which remember the volume you chose and whether the player keeps playing after a track ends, and worklang, which remembers whether you last viewed the work-with-us page in English or Hebrew. There is also htmx-history-cache, a page-history cache kept by htmx, the library this site's navigation is built on: it holds recently viewed pages of this site so the back button feels instant, it never leaves your device, and it is cleared along with everything else listed here. Per song you interact with, two more keys may appear. rp_feedback.<song> remembers that you already sent feedback on that song, so we do not ask again; it is never sent to us. rp_react.<song> remembers which reaction you picked on that song's page, so your choice is still there when you come back. Unlike the settings above, its value is sent back to us when you change or undo that reaction, so the public count can be corrected; otherwise it stays on your device. An older key, rp_hello, is no longer set by the site and is ignored if your browser still has one. We honour your browser's Do Not Track and Global Privacy Control signals for the loyalty marker: if either is set, no marker is created or sent and you are not counted across days. You can also opt out directly here, and clearing this site's data in your browser removes everything listed above.
The work-with-us form
If you send us an inquiry through the work-with-us page, we receive what you typed: your name, email, optional phone number, your message, and an optional demo file or link. Demos are stored privately, are never published, and are heard only by the two of us. Write to us any time and we will delete your inquiry and demo.
That page also remembers your language choice (English or Hebrew) in your browser's local storage under the key worklang, described above. It identifies nothing and never leaves your device.
Third parties
Fonts on this site are loaded from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). Google may log the IP addresses of font requests. No other third-party scripts, trackers, or embeds load on public pages.
New song feedback is relayed to us through Telegram, a third-party messaging service, so we see it promptly; the message includes your words and the optional name you gave. The retired artist-note card's notifications worked the same way while it was live. Work-with-us inquiries are relayed through Telegram too, and are also emailed to us through Brevo, our transactional email provider.
Hosting is on a Contabo VPS located in the EU.
Legal basis
Server logs, aggregate page analytics, playback events, and the persistent loyalty marker are processed under the legitimate-interest basis (GDPR Article 6(1)(f)) — site security and understanding audience engagement and loyalty. The loyalty marker is first-party, carries no name or contact detail, honours Do Not Track / Global Privacy Control, and can be switched off at any time (see Cookies and local storage). Feedback you send after reacting to a song is different: you type it and submit it yourself, so it is processed on the basis of your consent (GDPR Article 6(1)(a)), and you can withdraw that consent by emailing us to have it deleted or unfeatured. The reaction record itself contains no personal data.
Your rights
Under GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. To exercise any of these, or for any other privacy question, email us below. We ask public listeners for no emails and no contact details. What is collected automatically and could relate to you is: the pseudonymous loyalty marker, which you can switch off above and remove by clearing this site's data; the standard server request logs described above, which include your IP address and are kept for 30 days; and — only if you trip the download rate-limit — the raw IP address and user-agent recorded in the staff-only security log, also kept for at most 30 days. Separately: a name and note you typed yourself into the voluntary artist-note card, and written feedback (with the optional name you gave) sent after reacting to a song, are each kept until you ask us to remove them, including unfeaturing anything of yours we chose to feature. Tell us roughly when and which track, and we will act on it.
Studio accounts (V3+)
If you have a Random NEXT Studio account, we store:
- Your email address (used for login + transactional notifications: invites, password resets, new versions, new comments, publish announcements).
- Your display name (optional; visible to your collaborators inside Studio).
- If you link Telegram, your Telegram chat ID (used to send notifications to that chat only).
- Songs, audio files, comments, and lyrics you upload or write inside Studio.
To delete your account or request your data, email partouche.moshe@gmail.com. We delete accounts on request and remove all associated personal data within 30 days. Audio files attached to published catalog entries (status=published) may be retained for the catalog's lifespan.
Contact
For privacy or any other question: partouche.moshe@gmail.com.