Privacy Policy

ReelSongFinder (“we”) provides a tool to identify songs from public Instagram Reel links. We are not affiliated with Meta Platforms, Inc. or Instagram. How we handle paid access is in Terms.

What we process

  • Reel URLs you submit, for identification and shortcode caching
  • A visitor id for this browser and a hashed IP used for abuse limits and to tie paid access to this browser
  • Buyer email and a visitor cookie when you buy a credit pack or Unlimited (billing entitlement)
  • Standard server/CDN logs (User-Agent, timestamps, status codes)
  • Audio fingerprints processed via our recognition provider (AudD) when a token is configured
  • Payment events processed by our merchant-of-record provider (Waffo Pancake)
  • If Google Analytics 4 is configured, coarse product events (page path, identify outcome, pricing clicks, checkout step). Reel URLs, file names, and checkout email are not included

Waffo payments

Checkout runs on Waffo Pancake — they are the merchant of record. Waffo collects what they need to take payment and issue invoices: checkout email, payment method, billing details, tax, and order history. We never see or store full card numbers.

After you pay, Waffo sends us events (order completed, subscription activated / renewed / canceling / canceled, and similar). Those events carry the buyer email, order id, and enough metadata to grant or revoke pack credits and Unlimited. Waffo is an independent controller for payment data. Their Privacy Policy and Buyer Terms cover the charge itself. Questions about a receipt, tax invoice, or card charge can go to Waffo from the email they send, or to hello@reelsongfinder.com and we will point you there.

Email, cookies & entitlements

Paid access follows the email you enter at checkout, not a password account. We store an entitlement record keyed to that email (and sometimes a visitor id): credits remaining, Unlimited status, optional order id, and last update. That is what unlocks IDs after a purchase.

A link check does not require an account. A visitor id (kept for up to about 13 months) and a hashed IP (aged out daily) are used for abuse limits and to tie paid unlocks to this browser.

After checkout — or when you use /restore — we may set first-party cookies so this browser can spend pack credits or use Unlimited:

  • rsf_vid — a random visitor id, so we can attach a grant to this browser
  • rsf_email — the checkout email, so Restore and identify know who paid

Both are first-party, last about 13 months, and are used only for entitlements — not advertising, and we do not sell the list. Knowing the checkout email can restore those cookies on a new browser; that is intentional until a magic-link flow exists. Restore attempts are rate-limited by IP. Clearing cookies does not delete the server-side entitlement and is not a refund.

Your data rights

You can ask us to access, correct, delete, or export the personal data we hold. Email hello@reelsongfinder.com from the address you used (or tell us that checkout email). We aim to reply within 30 days. Where the law gives you more, we follow that.

  • Access. We will confirm whether we hold an entitlement for that email and summarize what is in the record (credits remaining, Unlimited status, dates we have).
  • Correct. Typo on the checkout email, or a merge after you paid with a second address — write us. We can remap access if we can tie the order to you.
  • Delete. We can erase the entitlement record and tell you how to clear rsf_vid / rsf_email. The visitor id expires with the cookie (about 13 months); the hashed-IP daily limits age out with the UTC day. Cached public Reel results are not a profile of you; we do not treat them as your personal file. Deleting paid access does not by itself refund a purchase — ask under Terms if you want money back.
  • Export. We will send a machine-readable copy (typically JSON) of the entitlement fields we store for that email / visitor id.

Payment cards, invoices, and Waffo’s own logs live with Waffo. We cannot export their full billing file; we will tell you how to reach them, or pass a deletion / access request along when that is the practical path.

Product analytics

Pages load Google’s tag (gtag.js) and record page views plus product events: identify start, success, and error, pricing and other call-to-action clicks, paywall views, checkout start, and purchase. In the EEA and the UK, analytics and ad storage default to denied. Elsewhere they default to granted.

Those events do not include Reel URLs, uploaded file names, checkout email, or the Waffo checkout URL. Page views use the path only — query strings are dropped — and the referrer is reduced to the site origin, so a link from a Reel does not send that Reel’s URL. IP anonymization is on, and ad personalization signals are off. This is product measurement, not an ad profile.

Google is an independent processor for data they receive. Google’s Privacy Policy applies. You can block the tag with a browser extension or by rejecting third-party scripts.

What we don’t do

  • No account required for a link check
  • No sale of personal data
  • No access to private Instagram accounts

Contact

Privacy and data-rights requests: hello@reelsongfinder.com