Privacy Policy

Last updated: 26 September 2026

In short

MusicPromoLab collects only what it needs to run your promotion campaigns: the campaign brief you submit, your checkout details, and the basic cookies that keep the site working. We don’t sell personal data. You can request a copy, correction, or deletion of your data any time at office@musicpromolab.com.

Who we are

MusicPromoLab (musicpromolab.com) is a service of AMPLIVO S.R.L., which is the controller of the personal data described on this page. You can reach us any time at office@musicpromolab.com.

What we collect

Three kinds of data, all of it entered by you or created by your order:

  • Your campaign brief. The track or release link, genre, similar artists, your story, target markets, artist name and socials, plus any optional notes and flags you add. It’s stored with your order so we can run the campaign.
  • Checkout and account details. Name, email, and billing details when you buy. Payments are handled by our payment processor; full card numbers never touch our servers.
  • Site basics. Essential cookies for the cart, checkout, and login sessions.

How we use it

To run the campaigns you ordered, process billing and monthly renewals, answer support email, and meet legal obligations like tax and accounting records. That’s the list. We don’t sell personal data, and we don’t hand it to third parties for their advertising.

Cookies, analytics & advertising

Essential cookies keep the cart, checkout, and your login session working. The site doesn’t function without them.

Analytics that wait for your choice

We use Microsoft Clarity, Google Analytics 4, the Meta pixel and Google Ads conversion measurement to understand how the site is used (which pages get read, where visitors get stuck) and to measure advertising, always in aggregate. If you are in the European Union or the wider EEA, the United Kingdom, Switzerland or Brazil (we tell this from your device’s time zone; nothing is looked up or stored), Clarity, Google Analytics 4 and the Meta pixel load only after you accept analytics cookies; if you decline, none of the three loads and none of them tracks you. Everywhere else they load when you arrive, a notice at the bottom of the page says so, and one tap on “Opt out” turns them off and keeps them off; a Global Privacy Control signal from your browser counts as opting out. Google Ads conversion measurement loads on every page in Google’s cookie-free “consent mode”: until you accept (or, outside those regions, unless you opt out) it sets no cookies and reads nothing from your browser, and the only thing it can send is an anonymous, cookie-free signal that a page or an order was completed, which Google uses for aggregate estimates. Clarity records anonymized sessions to help us improve the site. Google Ads conversion measurement tells Google Ads that an order was completed, and its value, so Google can match it to a click on one of our adverts and we can tell which adverts lead to orders; it sets its own cookies only after you accept, or, outside those regions, unless you opt out. We never use any of them to identify you personally.

Whichever you choose, we keep that one setting in your browser so the banner stops asking. You can change your mind at any time with the Cookie settings link at the bottom of any page.

Four things that do not wait for that choice

The Cookie settings choice controls the four tools above. It does not control these, so we set them out plainly:

1. WordPress.com site statistics. This site is hosted on WordPress.com, and its built-in visitor statistics (Jetpack Stats, run by Automattic) load on every page for every visitor. They record which page was viewed, the page you came from and your time zone, and they count clicks on links leaving the site. This is sent as a tracking pixel to pixel.wp.com. It sets no cookies and reads nothing from your browser’s storage, and it is never given your name, your email address or anything you type — but, as with any script served by another company, your IP address and browser user-agent reach Automattic’s servers as part of the request. The same host also loads a small performance-measurement script from Automattic on every page (bilmur, served from s0.wp.com), which reports how quickly the page loaded to pixel.wp.com; it sets no cookies and reads nothing from your browser’s storage either, and the same note about your IP address and user-agent applies.

2. A first-party cookie recording how you arrived. If you reach us from an advert, a link or another site, we store a cookie named bs_attrib_v1 for 90 days holding the campaign details, the site you came from, the page you landed on and the time. We use it only to tell which campaign produced an enquiry. It never leaves your browser — nothing is sent to anyone because of it. We do not set it if you arrive directly with no such signal, and never for logged-in users.

3. The store’s own order-attribution cookies. The shop software (WooCommerce) sets seven small first-party cookies whose names start with sbjs_ as soon as any page loads. They record how you reached the site (the source, medium and campaign named in the address, the referring site and the page you landed on), a visit count, your browser’s user-agent string, and the page count and current page of this visit. If you place an order, a summary of that arrival is saved with the order so we can see which route brought it. They are read only by this site and are not sent to anyone else by us; they do not identify you by name; and they are set whether or not you accept analytics.

4. A purchase event sent to Meta when an order is paid. Described below.

What we keep in your browser

Besides the seven sbjs_ cookies above, three items, all first-party: bs_consent_v1, your accept, decline or opt-out choice; bs_attrib_v1, the 90-day arrival record above; and bs_intake_v2, a saved draft of a campaign brief you have started filling in, kept on your own device so you do not lose it. Storing that draft does not send it anywhere. While a visit lasts, mpl_first_touch (session storage, cleared when you close the tab) remembers where the visit came from so that analytics can tell our Google, Meta and TikTok adverts apart.

What is sent to Meta when an order is paid

When a payment completes we send Meta a single Purchase event for that order, from our server. It contains your email address and your first and last name in irreversibly hashed form (SHA-256) — never in readable form — plus the advertising click identifier if your visit carried one. No IP address and no browser user-agent are sent. One event per order. This also does not wait for the analytics-cookie choice.

Third parties

We share data only with the services required to deliver ours: the payment processor (billing), our hosting provider (site infrastructure), and email when you write to office@musicpromolab.com. Each receives only what its job requires.

Your data requests

Email office@musicpromolab.com to request a copy, correction, or deletion of your personal data. We’ll act on it promptly, except where the law requires us to keep records, such as completed order and tax records.

Data retention

Order details and campaign briefs are kept for as long as needed to deliver the service and satisfy legal and accounting requirements, then deleted or anonymized.

Changes to this policy

If this policy changes, the new version appears here with a fresh date at the top.

Spotify is a trademark of Spotify AB; MusicPromoLab is not endorsed by, affiliated or partnered with Spotify.

Questions? Contact us.