Privacy Policy

So Far So Good (https://www.sofarsogood.love) is operated by Nowhere International LLC, 33 N Gould St, Sheridan, WY 82801, United States, the controller of the personal data described in this policy. For anything related to your data, use the contact form. This policy covers the platform at https://www.sofarsogood.love.

We collect only what the platform needs to work:

• Account data — your email address, display name and identity label (for example Producer or Early Ears).
• Content you create — uploaded music and its metadata, feedback and comments, So Good reactions, and the contents of direct messages you send to other members.
• Support activity — the amounts you offer or receive, request and download history, the supporter name shown to the Creator and, for Creators who ask to be paid, the account holder name and bank details (IBAN, or account number and SWIFT/BIC) that payouts are sent to, plus an address where the transfer or a Resident invoice needs one.
• Download logs — when you download an Early Copy we record the download’s unique Download ID together with your IP address and browser user-agent string. This exists for one purpose: tracing leaked files back to the account that downloaded them.
• Share activity — when someone opens a Track ID you shared, we count the visit and, if it leads to a download, record what you earned. Visits are stored as a one-way digest that is different for every Track ID, so they cannot be joined back into a picture of anyone’s browsing — and the person who shared never learns who arrived.
• Visitor counts — so we know how many people came to the site each day, we turn your IP address and browser user-agent into a one-way digest that also includes the date, and keep only that. The IP address itself is never stored. Because the date is inside the digest, today’s value cannot be matched to tomorrow’s, so this can never be assembled into a record of what any one person browsed. Nothing is stored on your device for this, and it is never shared.
• Safety records — reports you file or that are filed about you, moderation flags and blocks, and internal notes made by Hosts.

We run no third-party analytics or advertising trackers, no third-party pixels, and we do not buy or enrich data about you from anyone. We count visitors ourselves, in the way described in section 2 — no profiles, no cross-site tracking, and nothing that leaves us. We never see or store your card details — those go straight to our payment processor (see section 7).

• running your account and the platform’s features;
• streaming previews and delivering your Early Copy Downloads;
• confirming support payments so Early Copies can be downloaded, and recording what each Creator has earned;
• protecting Creators’ pre-released music — Download IDs and download logs let us trace leaks;
• moderation, safety and abuse prevention;
• sending you service messages (we do not send marketing email).

Projects are Anonymous to other members, not to us. We necessarily know which account uploaded which project; that link is stored server-side and never shown publicly. Your identity is revealed to other members only when you choose to reveal it — typically when you accept support and share an Early Copy.

Where EU data-protection law (GDPR) applies to you, we rely on:

• Contract — running your account, delivering previews and Early Copies, processing payments;
• Legitimate interests — download logging for anti-leak tracing, moderation and platform security;
• Legal obligation — keeping payment and tax records;
• Consent — optional choices such as revealing your identity as a Creator.

Support payments are collected by So Far So Good and processed by Stripe or PayPal. Your card or bank details are entered with the processor and never reach our servers. We keep the payment confirmation — transaction reference, amount, status and the country of the card or account used, which is our tax evidence — to deliver your Early Copy and keep accurate records. The processors handle your data under their own privacy policies. Creators are paid by bank transfer to the account they give us.

We never sell personal data. We share it only with:

• service providers that host the platform, store its data and files, and deliver its emails — they act only on our instructions, under data-processing agreements;
• the payment processors in section 7;
• authorities or rights holders where the law requires it — for example a valid court order, or the tracing of a leaked Early Copy in connection with a legal claim.

We are based in the United States, and our service providers may process data outside your country, including outside the European Economic Area. Where data leaves the EEA, it is protected by recognised safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

• Account data and content — for as long as your account exists; deleted when your account is closed, except where retention is legally required.
• Download logs (IP address, user agent, Download ID) — up to 24 months, so a leaked Early Copy can still be traced.
• Payment records — for the statutory retention periods that apply to financial records.
• Messages and safety records — until deleted by the participants or no longer needed for moderation and safety.

You can ask us to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw any consent you have given. Send your request through the contact form using your account email address and we will respond within one month. Account deletion is currently handled this way rather than through a self-serve button.

If you are in the EU/EEA you also have the right to complain to your local data-protection supervisory authority.

The platform uses only essential cookies — to keep you signed in, start a download, credit a shared Track ID, and protect card payments against fraud. None of them profiles you, and there are no analytics or advertising cookies. Details are in the Cookie Policy.

Uploaded music is stored in private buckets that have no public URLs; previews and downloads are served through short-lived signed links (previews expire after one hour, download links after five minutes). Access to member data is restricted to Hosts, all traffic is encrypted in transit (HTTPS), and card data is handled entirely by our payment processor — it never touches our systems.

The platform is for adults. You must be at least 18 to create an account, and we do not knowingly collect data from anyone younger. If you believe a minor has registered, tell us through the contact form.

We will update this policy when our data practices change and note the date at the top; material changes are announced on the platform. Privacy questions and requests: the contact form.