Privacy

Last updated October 11, 2026

This policy explains what dancebook.com, catalog.dancebook.com and the Dancebook API (together "Dancebook") collect about you, why, and what you can do about it. Questions and requests: admin@dancebook.com.

Who is responsible for your data

Dancebook is operated by William Harvey, 2355 Westwood Blvd. #1211, Los Angeles, CA 90064, USA, who decides how your personal data is used (the "controller" under the GDPR). Contact: admin@dancebook.com.

Accounts

If you create an account, Dancebook stores your email address, an optional display name, when you signed up, your role, your answer to the cookie question, and the security settings you choose (such as two-step sign-in). It also stores how you sign in: a securely hashed password (never the password itself), or, if you sign in with Google, the link to your Google account (see below), or both. Your email address is used to confirm your account and to reset your password, and is visible only to Dancebook administrators and, next to the tags you give, to Editors.

Signing in with Google

You can sign in with your Google account instead of a password. If you do:

• What Google tells Dancebook. Only your basic profile: your Google account ID, your email address (and whether Google has verified it), your name and your profile picture. Dancebook asks for nothing else. It cannot see your Gmail, Google Drive, contacts, calendar or any other Google data, and cannot act or post on your behalf.
• What Dancebook keeps. Your Google account ID, so it recognizes you the next time you sign in; your email address, as your account's email address; and, the first time, your name as your display name, which you can change or remove. Your profile picture is not kept.
• How it is used. Only to sign you in and to run your account, as described on this page. Dancebook does not sell Google user data, does not use it for advertising or to build profiles, and does not give it to anyone else, except the hosting provider that runs the site for us. Dancebook's use of information received from Google APIs adheres to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements.
• Google's part. Signing in happens on Google's own pages, where Google's privacy policy (opens in a new tab) applies.
• Stopping. You can remove the link to your Google account in Your account (set a password first if it is your only way to sign in), or delete your Dancebook account, which deletes the link too. You can also remove Dancebook's access from your Google account at myaccount.google.com/permissions (opens in a new tab).

Fingerprints and dance tags

Audio fingerprints, track details and dance tags you submit are stored with a reference to the account or application that submitted them. That reference is never shown publicly or returned by the API; Editors, who review dance tags, can see which account gave a tag. A fingerprint is a short code computed from a recording; Dancebook never receives the audio itself.

API keys

For each API key, Dancebook stores its name, the account or person it was issued to, administrators' notes about it, its permissions, when it was created, and which fingerprints and tags were submitted with it. The key itself is stored only as a secure hash.

Deleting your account

You can delete your account from Your account → Personal data. Your email address, name, password and the link to your Google account, if any, are deleted and you can't sign in again. If you have tagged or reviewed tracks, an anonymous record of the account stays so those tags keep their history; it holds no personal data. You can also download the personal data in your account from the same page.

Cookies

Dancebook uses a few cookies the site needs to work: to keep you signed in, to protect forms, to show one-time messages, and to remember your answer to the cookie question. These are always on. One optional preferences cookie remembers your Light/Dark choice; it is only used if you accept it, and until then pages use the Light skin. There are no advertising, analytics or other companies' cookies. The full list, and the place to change your answer, is on the Cookies page.

Emails

Dancebook only emails you about your account: to confirm your address, to reset your password, or to confirm a new address. There is no newsletter or marketing email.

Logs and security

To keep the service working and secure, the web server keeps technical records of requests (such as the IP address, the page requested and the time), and Dancebook counts recent sign-in attempts per IP address to stop password guessing. These records are used only for security and troubleshooting, and are kept only as long as needed for that, normally no longer than 180 days.

How your data is protected

All connections to Dancebook use HTTPS. Passwords are stored only as secure hashes, two-step sign-in is available, sign-in attempts are rate limited, and access to personal data is limited to Dancebook's administrators and, for tag review, Editors. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities where the law requires it.

Where your data is stored

Dancebook's servers and database are in the United States, hosted by SmarterASP.NET. Account emails are sent through Google Workspace, which may process data in the United States or other countries.

Automated decisions

Dancebook does not make decisions about you by automated means, including profiling, that have legal or similarly significant effects. Matching audio fingerprints to tracks is automated, but it concerns recordings, not people.

If you are in the United States

California's Online Privacy Protection Act (CalOPPA), the California Consumer Privacy Act as amended by the CPRA (CCPA), the Colorado Privacy Act (CPA), and similar state privacy laws (including those of Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia) ask for the notices below. Most of these laws apply only to businesses above certain sizes, which Dancebook may not reach; Dancebook honors the rights below for visitors from every US state anyway.

• Personal information we collect, and where it comes from. From you: your email address, optional display name and password (stored hashed), your role, your answer to the cookie question, your security settings, and the contributions you make while signed in. From Google, if you sign in with Google: your Google account ID, email address and name (see Signing in with Google). From your browser: the cookies listed on the Cookies page, and technical records of requests (IP address, page and time). Dancebook does not collect sensitive personal information, and does not collect any information about children (see the Terms: Dancebook is for people who have reached the age of majority).
• Why we use it. To provide your account, to send account emails, to attribute contributions and review them, and to keep the service secure. Not for advertising and not for profiling.
• Who it is shared with. Only our service providers, who process it on our behalf: our hosting provider (SmarterASP.NET) and our email provider (Google Workspace). If you sign in with Google, Google provides the sign-in; it does not receive anything from Dancebook beyond the sign-in request. Dancebook does not sell personal information, does not share it for cross-context behavioral advertising, does not use it for targeted advertising, and does not disclose it to third parties for their own direct marketing (California's "Shine the Light" law, Civil Code section 1798.83). No third party collects personal information about your activity on Dancebook over time or across other websites.
• How long we keep it. Account information: while your account exists, then deleted when you delete the account. Contributions: kept as part of Dancebook's public data, no longer linked to you once your account is deleted. Technical records of requests: only as long as needed for security and troubleshooting, normally no longer than 180 days. Cookies: as listed on the Cookies page.
• Do Not Track and Global Privacy Control. Dancebook does not respond to Do Not Track (DNT) signals. It does not track you across other websites or let anyone else do so, so there is nothing for DNT to turn off. Dancebook does not sell personal data or use it for targeted advertising, so there is nothing for a universal opt-out signal such as Global Privacy Control to opt you out of; if that ever changes, Dancebook will honor those signals.
• Your rights. You can ask to know what personal information we hold about you, to get a copy of it in a portable format, to correct it, and to delete it. You can also opt out of the sale of your personal information or its use for targeted advertising, although Dancebook does neither. We will not treat you differently for using these rights. Most of this you can do yourself in Your account (Profile, Email, and Personal data: download or delete); for anything else, write to admin@dancebook.com, from the email address of your account so we can confirm it is you. In California, someone you authorize may make the request for you. We answer within 45 days.
• Appeals. If we decline a request, you can appeal by replying to our answer with "Appeal" in the subject. We answer appeals within 45 days. If you are not satisfied with the result, you can contact your state's Attorney General.
• Reviewing and changing your information. Your account pages show and let you change your display name, email address, password, security settings and the Google account linked to it, download your data, and delete your account.
• Changes to this policy. When this policy changes, the date at the top changes. If a change affects cookies, the cookie banner asks you again.

If you are in the European Union, the EEA or the UK

The EU General Data Protection Regulation (GDPR), and the UK GDPR, give you these rights over your personal data.

• Controller. William Harvey, 2355 Westwood Blvd. #1211, Los Angeles, CA 90064, USA (admin@dancebook.com). Dancebook is run from the United States and has no establishment or appointed representative in the EU, the EEA or the UK.
• Why we use your data (legal basis). Your account data: to provide the account you asked for (performing our agreement with you). Security records and attributing tags to the account that gave them: our legitimate interest in keeping the service secure and its data reliable. The preferences cookie: your consent, which you can withdraw at any time on the Cookies page.
• What you must provide. To have an account you need to give an email address (and a password, unless you sign in with Google); without them we can't create the account. Everything else, such as a display name, is optional. You don't need an account to read the site.
• Your rights. You can ask to see the personal data we hold about you, to correct it, to delete it, to receive it in a portable format (Your account → Personal data → Download), to restrict its use, or to object to its use. Write to admin@dancebook.com; we will answer within one month.
• How long we keep it. Account data: while your account exists; deleting the account removes it, as described above; the anonymous record a deleted account leaves holds no personal data. Your cookie answer: up to 12 months in your browser. Security records: only as long as needed for security and troubleshooting, normally no longer than 180 days.
• Automated decisions. None that have legal or similarly significant effects on you, and no profiling (see Automated decisions above).
• Who else handles it. Dancebook does not sell or share your personal data. It is stored by our hosting provider (SmarterASP.NET) in the United States, and account emails are sent through Google Workspace; both act only on our behalf. If you choose to sign in with Google, Google provides the sign-in under its own privacy policy (see Signing in with Google). Their servers may be outside the EU; where they are, the transfer relies on the safeguards those providers offer, such as the European Commission's standard contractual clauses.
• Complaints. If you think we have mishandled your data, please tell us first. You also have the right to complain to the data protection authority in your country.
• Age. Dancebook accounts are for people who have reached the age of majority, which is 18 in the EU, the EEA and the UK.

Changes

If this policy changes, the date at the top changes too. If the change affects cookies, the cookie banner asks you again.