Last updated: 26.10.2026
Who is responsible
Pitchorado is a free service operated by:
Skyrocket Digital LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110
USA
curator@pitchorado.com
We are a company based in the United States. We handle personal data in line with the data protection laws that apply to us and to you. If you are in the European Union, the EEA, the United Kingdom or Switzerland, the rights described below under the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection apply to you where these laws cover our processing.
Visiting the website
When you open a page, our hosting provider Railway Corp. (USA, servers in the Netherlands) processes technically necessary data such as IP address, time and requested address in order to deliver the pages and fix problems. Fonts are served from our own server.
For our own visitor statistics we count page views on pitchorado.com and clicks on links to other websites, without cookies and without third parties. We store the page, the time, the domain of the website you came from, device type, browser, operating system, browser language and the country we derive from your IP address (database by DB-IP). We do not store the IP address itself. To count visitors, we create a short value from IP address, browser identifier, date and a secret key that changes every day; we cannot recognise you across several days. Where the GDPR applies, the legal basis is our legitimate interest in improving our service.
When you click “Listen on Spotify”, we count the click per playlist and day. We store neither your IP address nor a cookie. Spotify’s terms apply from there.
Cookies: our forms (song submission and the Monday email) set a technically necessary session cookie that prevents other sites from submitting a form on your behalf. We use no analytics or advertising cookies.
The Pitchorado Festival Guide at festivals.pitchorado.com has its own privacy policy.
The Monday email
If you subscribe, we store your email address, the time of sign-up and of your confirmation, and an encrypted short value of your IP address (only to limit sign-ups per day). You only receive the email after clicking the confirmation link we send you. Purpose: sending the new songs of the week once a week. Where the GDPR or a similar law applies, the legal basis is your consent. You can unsubscribe at any time with the link in every email. We delete unconfirmed sign-ups and unsubscribed addresses after 30 days. The emails are sent through Resend (Resend, Inc., USA); we do not track opens or clicks.
When you submit a song
We store the link to the song (Spotify, Apple Music or Deezer), your email address, optionally your name on Bluesky, Instagram, X or Mastodon, the playlist you chose, your message, your language, the time of your consent and an encrypted short value of your IP address (only to limit submissions per day). If you agree to the use of your song in our short videos, we also store the MP3 you upload; we delete it as soon as your song is declined, and otherwise together with your submission.
Purpose: reviewing the song, replying by email (accepted or declined) and, if accepted, mentioning you in our post. Where the GDPR or a similar law applies, the legal basis is your consent, which you can withdraw at any time by email.
To review a song we load its public 30-second preview from Deezer or Apple iTunes and have Google Gemini (Google LLC, USA) classify genre, mood and vocals. We also analyse the preview on our own server for signs of AI generation and compare artist names with public lists of AI artists. We do not pass on your email address or your message.
We send and receive emails through Resend (Resend, Inc., USA).
Public posts on Bluesky and Mastodon
We search Bluesky and Mastodon (public hashtags such as #newmusic and, with our account @pitchorado on mastodon.social, the public search for posts with song links) for public posts in which musicians or music curators share a song. We store the account name, the link to the post, the text of the post and, for artists on Bluesky, the number of followers in order to review the song and, if it is accepted, mention the account. Where the GDPR applies, the legal basis is our legitimate interest in presenting new music.
So that our posts can mention artists, we also store the names of their public accounts on Bluesky, Instagram, X, Mastodon or TikTok: accounts the artist gave us, linked in their own Bluesky profile, or found and checked by us in the public search of these networks. We delete these account names 24 months after storing them.
If you do not want any of this, write to us; we will delete the data and no longer consider your account.
Where your data is processed
Your data is processed in the United States and, for hosting, in the Netherlands. Our service providers Railway, Google and Resend are based in the United States. If you are outside the United States, this means your data is transferred to the United States, where data protection laws may differ from those in your country. Where our providers take part in the EU-U.S. Data Privacy Framework or its Swiss and UK extensions, or offer standard contractual clauses, we rely on these.
How long we keep data
We delete submissions and the related data no later than 12 months after submission, earlier if you ask us to. Artists' account names (see above): 24 months. Monday email: see above. Visitor statistics: 400 days.
No selling of personal information
We do not sell or share your personal information for advertising, and we do not use it for profiling.
Children
Pitchorado is not directed at children under 16. We do not knowingly collect personal information from children under 13. If you believe a child has sent us data, please contact us and we will delete it.
Your rights
You can request access to, correction and deletion of your data and object to its processing. An email to curator@pitchorado.com is enough. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.
Changes
We may update this policy. The date at the top shows the latest version.