Privacy Policy

Information we collect

When you request download access, we collect your email address, request time, acceptance of the current terms, an internal request reference, and the email service’s acceptance or failure status. Successful access requests also appear in our private main-site contacts database. Their email address, request time and reference are included in an automatic notification to our administrator at admin@dcode.nexus. An email accepted for sending does not prove that the address belongs to you or that the message arrived in your inbox.

We use a daily-rotating, keyed hash of your IP address to limit repeated requests. Our application does not save the raw IP address in its contacts or access tables. Cloudflare, Google and our delivery provider may separately process IP addresses, device details, cookies and security or delivery logs while supplying their services.

Why we use your information

Your email is required for the access email and the 24-hour browser session that enables downloads. We also use request records to prevent abuse, investigate delivery problems and respond to support requests. If you do not supply an email address, you cannot unlock the downloader.

Requesting access does not subscribe you to newsletters or marketing. We do not sell the contacts list. Any later marketing subscription would need a separate choice.

Audio and SoundCloud links

The server requests public track information and audio from SoundCloud to fulfil your download request. MP3 conversion happens in your browser. We do not intentionally save your track links or audio in the contacts database, and we do not keep a library of your converted audio on our server. Audio remains in browser memory while the page is open and in any file you choose to save. Closing the page ends the browser’s conversion session.

Cookies and advertising

A necessary, secure access cookie contains a signed request reference and expiry time, rather than your email address. It expires after 24 hours and is limited to this hostname. Deleting it or blocking necessary cookies can lock the downloader again.

We use Google AdSense advertising. Google and other advertising vendors may use cookies to serve ads based on earlier visits to this or other websites. Google’s advertising cookies can enable it and its partners to personalise ads across websites. Read how Google uses information from partner sites and manage personalisation through Google My Ad Center. You can also manage cookies in your browser and explore third-party opt-outs at YourAdChoices. An advertising opt-out does not necessarily stop all ads or necessary cookies.

The Google Search Console verification tag establishes site ownership; we do not use it to collect your email or install Google Analytics.

Providers, storage and access

Cloudflare hosts the application, private D1 contacts database, access controls and, where enabled, transactional email sending. SMTP2GO is the alternative sending provider supported by this app. Email is sent through the configured provider. The MP3 converter is delivered through our hostname from a pinned jsDelivr package. These providers receive information needed to perform their part of the service; we do not send your email to SoundCloud, Google AdSense or jsDelivr as part of the access request.

Providers may process information outside Australia, including in the United States. Their own processing, retention and locations are described in the Cloudflare privacy policy, SMTP2GO privacy policy and Google privacy policy. We restrict contacts viewing and CSV export to the administrator. Downloading the contacts file does not make it public.

Retention and your choices

We retain access and associated contact records for 90 days and remove expired records through scheduled cleanup. Rate-limit IP hashes rotate daily and are cleared after 24 hours at the next cleanup. A legal obligation or an active security investigation may require a longer hold. Provider logs, backups and any private export retained by the operator may have separate deletion cycles.

Email admin@dcode.nexus to request access, correction or deletion, or to raise a privacy complaint. Include enough detail to locate your record; we may verify your identity before disclosing information. We aim to respond within 30 days. If you are dissatisfied, you may contact the Office of the Australian Information Commissioner, where its jurisdiction applies.

Changes

We will update the date on this page when our practices change. New uses of information will be explained before they begin where required.