Privacy Policy
Last updated November 9, 2026
lstn.fm is operated by Theoria Group LLC, doing business as lstn.fm ("lstn.fm", "we", "us"). lstn.fm makes music links, tour pages, listening pages and fan sign-up forms for record labels, artists, managers and agencies ("our clients"). This policy explains what we collect when you use those pages or our own website, how it's used, who it's shared with, and the choices you have.
Two different roles
- Pages we run for our clients (release links, tour pages, listening pages and their sign-up forms). The label or artist named on the page decides what's collected and how it's used, and we handle it on their behalf. Their own privacy policy, linked at the bottom of those pages, also applies.
- Our own website (lstn.fm, including the early-access form). Here, we decide how your information is used.
What we collect
Information you give us
- Your email address, and your phone number if a form asks for it and you choose to give it.
- Your name, city and favourite venue if you ask an artist to play near you.
- The songs you give a thumbs up on a listening page.
- For early access: your name, email, company or artist name, role and anything you choose to tell us.
Information collected automatically
- Which pages you view and which buttons you tap (for example, which streaming service you chose).
- Where the visit came from: the website that sent you, and campaign tags and ad click identifiers in the link (such as utm_source or fbclid).
- Your approximate country and whether you're on a phone or a computer. We use your IP address to work out the country but don't store it.
- A random visitor ID kept in a cookie, so a visit and a later sign-up can be connected.
Information from our clients' stores
If a client connects their online store (Shopify), we look up whether a fan who signed up through their pages has placed orders, and the order totals, so the client can see which releases and campaigns bring in customers.
Cookies and ad pixels
| Name | What it's for | Kept for |
|---|
| tl_vid | A random visitor ID, to count visits and connect them to a later sign-up | Up to 400 days |
| tl_ft | Where your first visit came from (campaign and ad click) | 90 days |
| _fbc | The Meta ad click that brought you, so the visit can be credited to the ad | 90 days |
| lstn_consent, lstn_optout | Your privacy choices | Up to 2 years |
With your permission where it's required, our clients' pages may also load advertising pixels from Meta, TikTok, Google, Spotify and X. These measure visits and clicks, help show relevant ads, and set their own cookies under those companies' policies. We may also send the same events to these platforms directly from our servers. When you sign up, your email (and phone, if given) is sent to them in hashed (scrambled) form so they can match it to an account, never in plain text.
In the EU, EEA, UK and Switzerland, ad pixels and tracking cookies stay off until you choose Accept. Everywhere, you can switch them off on Your Privacy Choices, and we honour the Global Privacy Control signal from your browser.
How information is used
- To run the pages and forms, and to send the emails you asked for (such as release news or a discount code).
- To give our clients reports on their pages: visits, clicks, sign-ups, where fans came from and, if their store is connected, purchases.
- To measure advertising and, where allowed, help show relevant ads.
- To create one-time discount codes you request.
- To keep the service secure and prevent spam and abuse.
Who it's shared with
- The client whose page you used. They receive your sign-up details and can email you about their music, merch and shows.
- Service providers that help us run lstn.fm: Cloudflare (hosting), MailerLite (email), and our clients' Shopify stores (customer records and discount codes).
- Advertising platforms (Meta, TikTok, Google, Spotify, X), only as described above and subject to your choices.
- Music services we use to show songs and dates (Spotify, Deezer, Songstats, Bandsintown). We send them artist and song information, not your personal information.
- Authorities, if required by law, or a buyer if our business is sold.
We don't sell your personal information for money. Some US state laws treat sharing information with advertising platforms for targeted ads as a "sale" or "sharing". You can opt out at any time on Your Privacy Choices.
Your rights and choices
- Emails: every email has an unsubscribe link.
- Ads and tracking: use Your Privacy Choices, the consent banner, or your browser's Global Privacy Control.
- Access, correction and deletion: email privacy@lstn.fm from the address you signed up with. We'll confirm the request and respond within the time the law requires. If your information was collected for one of our clients, we'll pass the request on to them as well.
- In the EU, EEA, UK and Switzerland you can also object to or restrict how your information is used, ask for a copy in a portable form, withdraw consent at any time, and complain to your local data protection authority. We rely on your consent for ad pixels and tracking cookies, and on legitimate interests to run the pages and prevent abuse.
- In US states with privacy laws (such as California), you have the right to know, delete, correct and opt out of sale or sharing, and we won't treat you differently for using these rights.
How long we keep it
- Visit and click records: up to 25 months, then deleted.
- Sign-ups: until you unsubscribe or ask us to delete them, or the client stops using lstn.fm.
- Early-access requests: until we've been in touch about access, or you ask us to delete them.
Security
Information is sent over encrypted connections, access to our dashboard requires sign-in, and service keys are stored encrypted. No system is perfectly secure, but we work to protect your information.
Children
lstn.fm isn't meant for children under 13, or under 16 in the EU, EEA and UK, and we don't knowingly collect their information. If you believe a child has signed up, contact us and we'll delete it.
International transfers
lstn.fm is based in the United States, and our providers process information in the US and other countries. Where required, transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses.
Changes
We'll update this page when our practices change and change the date at the top. Significant changes will be highlighted here.
Contact
Theoria Group LLC, doing business as lstn.fm
Email: privacy@lstn.fm