Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Bandcamp's privacy policy indicates that your personal data could be transferred to a new entity if the company undergoes business changes like an acquisition or bankruptcy, and the new entity may continue to use your data under the existing policy (risk_flags-1). Your information may also be transferred to and stored in countries outside your own, including the United States, where data protection laws may differ (risk_flags-2). Bandcamp can amend its Privacy Policy, and your continued use of the service after changes are posted means you automatically agree to the new terms (gotchas-1). The service may send you emails and other communications related to your posted content at their sole discretion (risk_flags-3). Finally, third parties may collect information about your website activity across different sites and mobile applications (risk_flags-4).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
4 findings
Critical issues and red flags that may indicate potential harm or significant risk to the user.
Not clearly stated: None
high95% confidence
Personal Data may be transferred during business changes
If Bandcamp or its assets are acquired, or if Bandcamp goes out of business or enters bankruptcy, customer information would be transferred or acquired by a third party. The acquirer may continue to use your Personal Data as set forth in this policy.
Why it matters: Your personal data, including sensitive information, may be transferred to a new owner or entity if the company undergoes a business change like an acquisition or bankruptcy, and that new entity may continue to use your data under the existing privacy policy.
Business Transfers: In these types of transactions, customer information is typically one of the business assets that is transferred. Moreover, if Bandcamp, or substantially all of its assets were acquired, or in the unlikely event that Bandcamp goes out of business or enters bankruptcy, customer information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Bandcamp may continue to use your Personal Data as set forth in this policy.
When you use the Service, your information may be transferred to or stored in the United States or other countries where Bandcamp or its service providers operate. The data protection laws and rules in these countries may be different than those where you live. By using the Bandcamp Services, you authorize Bandcamp to process your information in any of the locations where they operate, if permissible under local law.
Why it matters: Your personal data may be transferred to and stored in countries outside your own, including the United States, where data protection laws may differ. This means your data might be subject to different privacy standards and legal protections.
When you use the Service, your information may be transferred to or stored in the United States or other countries where we or our service providers operate. The data protection laws and rules in these countries may be different than those where you live. We rely on various legal mechanisms to help lawfully support transfers of information outside the country of collection where appropriate. If permissible under local law, you’re authorizing Bandcamp to process your information in any of the locations where we operate (including the United States) by using the Bandcamp Services.
Data Transfers, paragraph 1 · Citation strength: strong
medium90% confidence
Email communication not directly related to user submissions
By posting User Submissions, you acknowledge and agree that the Company may send you email and other communication that it determines in its sole discretion relate to your User Submissions.
Why it matters: The company may send you emails and other communications related to your posted content at their sole discretion, which might include communications you did not explicitly request or anticipate.
You acknowledge and agree that by posting such User Submissions, Company may send you email and other communication that it determines in its sole discretion relate to your User Submissions.
Website activity information collected by third parties
Third parties may collect information about your website activity over time and on other websites or mobile applications.
Why it matters: Companies other than Bandcamp may track your activity on their website and across other websites and mobile applications, which could contribute to a broader profile of your online behavior.
Third parties may also collect information about your website activity over time and on other websites or mobile applications.
Practices related to the collection, processing, and sharing of personal data, including clarity, consent, and control.
Not clearly stated: None
medium90% confidence
User profile information may be displayed to others
User profile information including users’ name, email address, purchase history and other information you enter (“User Submissions”) may be displayed to other users in certain cases to facilitate user interaction within the Service. Email addresses will not be directly revealed to other users by Bandcamp, except when the user is “connected” to another user via a shared group membership, or an invitation, or if the user has chosen to include their email address in their User Profile.
Why it matters: Parts of your user profile, such as your name, email address, and purchase history, may be visible to other users. Your email address might be shared directly with other users under specific circumstances.
User profiles: User profile information including users’ name, email address, purchase history and other information you enter (“User Submissions”) may be displayed to other users in certain cases to facilitate user interaction within the Service. Email addresses are used to add new User Submissions to user profiles and to communicate through User Submissions. Users’ email addresses will not be directly revealed to other users by us, except, when the user is “connected” to another user via a shared group membership, or an invitation, or if the user has chosen to include their email address in their User Profile.
Terms and conditions related to account cancellation, subscription renewal, and associated policies.
?
Not clearly stated
No cited billing terms — wording is unclear
None
Gotchas
1 finding
Potentially surprising or obscure clauses that may be to the detriment of the user.
Not clearly stated: None
medium90% confidence
Privacy Policy can be amended without explicit consent
Bandcamp may amend its Privacy Policy from time to time. Users are bound by any changes to the Privacy Policy when they use the Service after such changes have been first posted.
Why it matters: Bandcamp can change its Privacy Policy, and by continuing to use the service after changes are posted, you automatically agree to the new terms. This means the terms governing your data use can change without your explicit agreement each time.
Bandcamp may amend this Privacy Policy from time to time. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we make changes in the way we use Personal Data, we will notify you by posting an announcement on our Service or sending you an email. Users are bound by any changes to the Privacy Policy when they use the Service after such changes have been first posted.
Changes to this Privacy Policy, paragraph 1 · Citation strength: strong
Protections
3 findings
Clauses that provide explicit benefits, rights, or safeguards for the user.
Not clearly stated: None
Protection95% confidence
Non-collection of data from children under 16
Bandcamp states that it does not knowingly collect, maintain, or use Personal Data from children under 16 years of age, and no part of the Service is directed to children under 16. If they learn that they have collected any Personal Data from children under 16, they will promptly delete such information and terminate the child’s account.
Why it helps: This commitment helps protect children's privacy by ensuring that their personal data is not knowingly collected and that any inadvertently collected data is promptly removed.
We do not knowingly collect, maintain, or use Personal Data from children under 16 years of age, and no part of the Service is directed to children under the age of 16. If you learn that your child has provided us with Personal Data without your consent, you may alert us by using the contact details provided in the “How To Contact Us” section below. If we learn that we have collected any Personal Data from children under 16, we will promptly take steps to delete such information and terminate the child’s account.
If Bandcamp relies on consent for the processing of your Personal Data, you have the right to withdraw your consent at any time, and this withdrawal will not affect the lawfulness of processing before the withdrawal.
Why it helps: This provides users with control over their personal data by allowing them to revoke their consent for its processing, ensuring that data processing aligns with their ongoing preferences.
Where required by law, we obtain your prior opt-in consent at the time of collection for certain processing of Personal Data, such as for direct marketing purposes. If we rely on consent for the processing of your Personal Data, you have the right to withdraw your consent at any time and, when you do so, this will not affect the lawfulness of the processing before your consent withdrawal.
Subject to applicable law, you may have the right to have your Personal Data blocked, anonymized, or deleted, as appropriate.
Why it helps: This grants users control over their personal information, allowing them to request the removal or anonymization of their data under certain legal conditions.
Subject to applicable law, you may have the right to: obtain confirmation that we hold Personal Data about you, request access to and receive information about the Personal Data we maintain about you, receive copies of the Personal Data we maintain about you, exercise your right to data portability, update and correct inaccuracies in your Personal Data, object to or restrict the processing of your Personal Data, and have the information blocked, anonymized or deleted, as appropriate.