Privacy Policy

Last updated: December 17, 2025

1. Introduction

Welcome to im_naku ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal data.

This Privacy Policy applies to www.imnaku.com and all associated subdomains. By using our website, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

im_naku is the data controller responsible for your personal data. For any privacy-related inquiries, please contact us at: imnakumusic@gmail.com

3. Information We Collect

3.1 Information You Provide

  • Account Information: When you create an account, we collect your username, email address, and authentication credentials.
  • Song Requests: When you submit song requests, we collect the song information and your username.
  • Communications: When you contact us, we collect your message content and contact details.

3.2 Automatically Collected Information

  • Analytics Data: With your consent, we collect anonymized usage data including page views, referrer information, screen size category, and timezone (no IP addresses stored).
  • Technical Data: Browser type, device information (coarse categories only), and interaction patterns.

3.3 Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time using the "Cookie Settings" link in the footer.

4. How We Use Your Information

We use your information for the following purposes:

  • Service Delivery: To provide and maintain our website and features.
  • Authentication: To verify your identity and manage your account.
  • Analytics: With your consent, to understand how visitors use our site and improve the experience.
  • Security: To protect against fraud, unauthorized access, and other security threats.
  • Communications: To respond to your inquiries and send service-related notifications.

5. Legal Basis for Processing (EEA/UK)

If you are in the European Economic Area (EEA) or United Kingdom, we process your data based on:

  • Consent: For analytics and marketing cookies/tracking (you can withdraw at any time).
  • Legitimate Interests: For security, fraud prevention, and service improvement.
  • Contract Performance: To provide services you've requested (e.g., account features).
  • Legal Obligation: To comply with applicable laws.

6. Analytics Providers

We use the following analytics services:

6.1 Plausible Analytics (Self-Hosted)

  • Purpose: Basic site usage metrics (page views, referrers, device categories).
  • Data Collected: Page URL, referrer, screen size category, country (derived from IP, not stored).
  • Cookies: None (cookieless by default).
  • Endpoint: metrics.satincake.com
  • Data Residency: Self-hosted infrastructure.

6.2 Internal Analytics

  • Purpose: First-party usage metrics for site improvement.
  • Data Collected: Page path, referrer hostname, screen bucket, timezone offset, session ID (random, not persisted).
  • Cookies: None.
  • Endpoint: /api/analytics/collect (first-party).
  • Retention: 90 days, then aggregated or deleted.

Do Not Track: We honor the Do Not Track (DNT) browser setting. If DNT is enabled, analytics will not run regardless of consent.

7. Third-Party Services

With your consent (Marketing category), we may embed content from:

  • Twitch: Live stream player and chat (player.twitch.tv, embed.twitch.tv)
  • YouTube: Video embeds (youtube.com, youtube-nocookie.com)
  • Discord: Server widget (discord.com)
  • Spotify: Artist embed player (open.spotify.com)

These services may set their own cookies and collect data according to their privacy policies. Until you consent, these embeds are blocked and replaced with placeholders.

8. Data Sharing and Transfers

We do not sell your personal data. We may share data with:

  • Service Providers: Hosting, analytics, and infrastructure providers who process data on our behalf.
  • Legal Requirements: When required by law or to protect our rights.

International Transfers: Some processors may be located outside the EEA/UK. We ensure appropriate safeguards (Standard Contractual Clauses) are in place.

9. Data Retention

  • Account Data: Retained while your account is active, plus 30 days after deletion.
  • Analytics Data: 90 days for raw data; aggregated statistics may be kept longer.
  • Consent Records: 3 years for audit purposes.
  • Security Logs: 90 days.

10. Your Rights (EEA/UK)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Restriction: Limit how we process your data.
  • Portability: Receive your data in a portable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time (use "Cookie Settings" in footer).

To exercise these rights, contact us at imnakumusic@gmail.com. We will respond within 30 days.

11. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • HTTPS encryption for all connections
  • Secure, HttpOnly cookies for authentication
  • CSRF protection for form submissions
  • Content Security Policy (CSP) headers
  • Regular security reviews

12. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at:

Email: imnakumusic@gmail.com