Privacy notice

Who manages your information

Paul Blume / Ironbark Horizon. Contact ironbarkhorizon01@gmail.com for access, corrections, deletion requests or privacy complaints.

What we collect and why

We use your email address and verified account ID to sign you in and connect your profile, applications, orders and downloads. Member profiles include name, contact email, interests, update preferences, consent versions and timestamps. Seller applications include the contact/business details and product plans you provide, review decisions and history. These records support membership and manual permission review.

Orders record the song, AUD price, accepted terms version, payment method/reference/status, confirmation time and download counts/expiry. PayPal transactions include order/capture identifiers. We do not collect your card number or bank-login credentials. Security controls use session-token hashes, expiring sign-in-link hashes and temporary IP/email request-limit records to prevent abuse.

Hosting, email and payments

Cloudflare hosts this website and its persistent database. The full song is stored privately and released only through the payment-checked download service. Where email sign-in is enabled through Gmail, Google processes your email address and a short-lived sign-in link for delivery. An optional Resend adapter is also available but is not selected. PayPal handles PayPal payment details on its own service and returns transaction identifiers/status. Provider processing may occur outside Australia; an Australian-only storage location is not promised. These services have their own privacy terms.

Usernames, passwords and profiles

Members can choose a unique username, display name, biography, approximate location, favourite genres/artists and other interests. Profiles are private by default; you may share a profile with signed-in members. Your account email and password details are never included in shared profiles. Forum posts can show your chosen display name. Passwords are stored as salted, slow hashes, not readable passwords. A password change signs out other member sessions. A fresh verified email link can recover access. You can edit your profile and sharing choice in My Account.

Cookies and access

Essential secure cookies keep member sessions for up to seven days, bind sign-in links to the requesting browser for 15 minutes, and keep owner sessions for eight hours. These are used for sign-in and security, not advertising. You can sign out or clear cookies; this prevents access to your account until you sign in again. There are no advertising trackers or marketing analytics added by this deployment. External video embeds, if enabled, are supplied by the linked video provider.

Members can view their own records. The owner can review applications and orders, assist with downloads and respond to support requests. Public pages do not display member contact details, private orders or complete song files.

Your preferences and requests

Marketing opt-in is optional and separate from sign-in and purchases. Update your preferences in your account or contact Paul to withdraw consent. Automated marketing is not connected. Essential sign-in emails are transactional. You can request access, correction or deletion by email; Paul may need to verify your identity and retain transaction records required for lawful business obligations or disputes.

Artists and forum

Artist introductions, music links, verified contact email and review notes are kept privately for the applicant and owner. Forum display names, messages and timestamps are visible to signed-in members after moderation. Your account email is not displayed publicly. Reports, reasons and moderation history are private to the owner. Do not include personal contact details or confidential/unlicensed material in posts. Contact Paul to request correction or removal.

Retention and security

Sign-in links expire after 15 minutes and sessions at their stated expiry; expired authentication and temporary limit records are cleaned during subsequent sign-in activity. Profiles, applications and order history remain until the owner processes a deletion/retention review. No system can promise absolute security. Report suspected access or disclosure promptly using the support email.

Complaints

Describe your concern and a contact method so Paul can investigate and respond. If unresolved, you may contact the appropriate privacy or consumer regulator. This notice describes the implemented service; it does not claim that a lawyer or regulator has approved the site.