Privacy Policy
A transparent look at how we handle, protect and respect your personal information.
1. Scope & applicability
LyricFinder.net ("Lyric Finder", "we", "our" or "us") operates a lyrics-based song identification platform (the "Service"). This Privacy Policy outlines the categories of personal data we process, the legal grounds upon which we rely, and the controls available to you as a visitor or user.
Lyric Finder is headquartered in Ludlow, Shropshire, United Kingdom. All processing activities described in this document are subject to the laws of England and Wales. By interacting with our Service you acknowledge that information may be transferred to, stored in, and processed within the UK as well as territories where our infrastructure partners maintain facilities.
This policy applies to every individual who visits our website, submits a search query, or otherwise engages with our tools—regardless of device, browser, or geographic location.
1.1 Age threshold
The Service is designed for individuals aged 16 and above. We do not intentionally gather data from anyone below this threshold. If you are under 16, please refrain from submitting any information through our platform unless a parent or legal guardian has provided verifiable consent.
1.2 External destinations
Our pages may contain outbound links to streaming platforms, artist profiles, or social networks that operate independently of Lyric Finder. We bear no responsibility for the data-handling practices of those external services, and we encourage you to examine their own privacy disclosures before sharing personal details.
2. Data we gather
2.1 Network identifiers
Every request to our servers automatically transmits your IP address. We use this identifier to route geographically appropriate content, detect anomalous traffic patterns, and compile aggregated performance metrics.
2.2 Device characteristics
Server logs capture your browser type and version, operating system, display resolution, and preferred language. These signals help us deliver a consistent experience across desktops, tablets, and mobile handsets, and allow our engineering team to prioritise bug fixes on the most common configurations.
2.3 Persistent browser tokens
On your initial visit we assign a randomised cookie identifier so that we can distinguish returning visitors from new ones, preserve your display preferences between sessions, and measure advertising reach without collecting names or email addresses.
2.4 Search behaviour
When you enter a lyric phrase, select a result, or navigate between pages, we record the query text, the result you chose, and the referring URL. This telemetry feeds our relevance-ranking algorithms and highlights emerging music trends.
2.5 Voice input
If you opt to use our microphone-based search, spoken audio is transcribed in real time and treated identically to a typed query. Raw audio buffers are discarded once the transcription is complete; we do not archive voice recordings.
2.6 Correspondence
Should you reach out through our support channel, we retain the name and email address you supply, together with the substance of your message, so that we can respond effectively and maintain a quality-assurance record.
3. Purpose of processing
We process personal data exclusively for the following objectives:
- Delivering, maintaining, and improving the core search functionality;
- Personalising the interface and surfacing region-relevant results;
- Serving contextual and interest-based advertisements that fund free access;
- Monitoring platform stability, diagnosing outages, and preventing abuse;
- Fulfilling any obligation imposed by applicable legislation or a court order.
5. Third-party data partners
We do not sell personal data. To sustain and refine the Service we share limited information with carefully vetted partners in the following categories:
- Infrastructure providers — companies that host our servers, manage our CDN, and ensure network uptime;
- Analytics vendors — services that aggregate anonymised interaction data so we can measure performance;
- Advertising networks — partners that deliver and optimise the adverts displayed alongside search results;
- Music-data suppliers — catalogue services that furnish lyrics metadata, artist details, and album artwork;
- Customer-support tooling — platforms that route and manage inbound enquiries on our behalf.
Each partner is bound by a data-processing agreement that restricts use to the purposes we specify. We apply encryption in transit and at rest, together with role-based access controls, to minimise exposure.
6. Rights for EEA residents
6.1 Legal bases
Where the General Data Protection Regulation applies, we rely on the following grounds:
- Performance of a contract — to deliver the search service you have requested;
- Legitimate interest — for fraud prevention, platform security, and product improvement, balanced against your fundamental rights;
- Consent — for non-essential cookies and any direct-marketing communications, which you may revoke at any time;
- Legal obligation — to comply with regulatory demands or judicial orders.
6.2 Your entitlements
Under the GDPR you may request access to your personal data, rectification of inaccuracies, erasure when retention is no longer justified, restriction of processing pending a dispute, portability of data you have provided, and the right to object to processing based on legitimate interest or direct marketing. Consent may be withdrawn without affecting the lawfulness of earlier processing.
7. Rights for UK residents
For visitors located in the United Kingdom, we process data in accordance with the UK GDPR and the Data Protection Act 2018. The legal bases and individual rights mirror those outlined in Section 6, adapted to the UK regulatory framework. UK residents may additionally lodge complaints with the Information Commissioner's Office (ICO).
8. How to exercise your rights
Submit a written request through our Contact page with the subject line "Privacy Request". To help us process your enquiry efficiently, please include:
- Your full name and email address;
- A precise description of the right you wish to invoke;
- Your country of residence so that we apply the correct legal framework;
- Any supporting identification we may need to verify your identity.
We will confirm receipt within ten working days and aim to fulfil verified requests within one calendar month. If the request is complex or we receive a high volume of enquiries, we may extend this period by a further two months and will inform you accordingly.
9. Managing preferences
9.1 Cookie controls
Non-essential cookies can be disabled through our preference centre or via your browser's privacy settings. Be aware that opting out of analytics or advertising cookies will not affect core search functionality but may reduce the relevance of displayed advertisements.
9.2 Microphone access
Voice search requires an explicit browser-level permission grant. The microphone activates only when you press the voice-search button and deactivates immediately upon completion. You can revoke this permission through your browser at any time.
9.3 Do Not Track
At present, our systems do not respond to the "Do Not Track" HTTP header. We recommend using our cookie preference centre for granular control over tracking behaviour.
10. International data transfers
Primary data storage resides in UK-based facilities. Where our partners process data outside the UK, we ensure adequate safeguards are in place—such as Standard Contractual Clauses approved by the ICO or an adequacy decision by the UK Secretary of State—before any transfer occurs.
11. Retention schedule
- Search logs and interaction data: retained for up to 24 months, then anonymised or deleted;
- Voice transcriptions: discarded in real time once the search result is returned;
- Cookie identifiers: expire after 12 months unless refreshed or manually cleared;
- Support correspondence: retained for up to 5 years for quality-assurance and dispute-resolution purposes;
- All other personal data: held only as long as the original processing purpose subsists or as mandated by law.
When data reaches the end of its retention window, we either irreversibly anonymise it or securely delete it in line with industry-standard data-destruction procedures.
12. Security programme
We maintain a layered security programme comprising:
- Encryption: TLS 1.2+ for all data in transit; AES-256 encryption at rest for sensitive records;
- Access governance: role-based permissions enforced through centralised identity management;
- Secure engineering: peer-reviewed code, automated dependency scanning, and scheduled penetration testing;
- Incident response: a documented playbook that includes breach detection, containment, notification, and post-incident review;
- Vendor assurance: due-diligence assessments and binding security clauses in every third-party contract.
No digital system can guarantee absolute security. In the unlikely event of a data breach we will notify affected individuals and the relevant supervisory authority without undue delay, as required by applicable law.
13. Complaints & enforcement
If you believe your data has been mishandled, please contact us through our Contact page. We treat every complaint seriously and will investigate within a reasonable timeframe.
EEA residents may escalate unresolved concerns to their national Data Protection Authority. UK residents may refer matters to the Information Commissioner's Office. Exercising any privacy right will never result in degraded service quality or discriminatory treatment.
14. Policy revisions
We may amend this Privacy Policy to reflect changes in our processing activities, evolving legal requirements, or improvements to our security posture. The "Last updated" date at the top of this page indicates when the most recent revision took effect. For material changes, we will publish a prominent notice on the Service. Your continued use following any update constitutes acceptance of the revised terms.
15. Get in touch
For any privacy-related question, data-access request, or general feedback, please reach us via our Contact page. Include "Privacy Enquiry" in the subject line so that your message is routed to the appropriate team.