You can read any published artist without an account, without accepting anything, and without telling us who you are. This page says what happens anyway, because something always does.
Who we are
Stagent B.V., trading as TAP (The Artist Passport), registered in the Netherlands under Chamber of Commerce number 75826216, at Keizersgracht 520H, 1017 EK Amsterdam, The Netherlands.
What we collect when you visit
Our servers keep a short technical log of each request: the address of the page, the time, your browser and version, and your IP address. We use it to keep the service running and to spot abuse. It is not linked to a person, we do not build a profile from it, and we do not sell it.
One analytics script, from Visitors, counts which pages are opened, here and on artist pages, without setting a cookie. It runs from your first page, a notice on that page says so and lets you object, and the cookie policy has the switch that turns it off.
What the artist sees
We also count, on our own servers, the views of an artist's pages, the clicks on their links, channels, release buttons and shop, what is taken from the EPK (a download, a copy or a file opened), the clicks on a contact's email address, phone number, website or Save contact, and the messages sent through the contact form, for that artist's stats. A view adds one to that day's count for the page, and one each to the counts for the kind of site you came from (such as Instagram, a search engine or a direct visit), your country and whether you use a phone, a tablet or a computer. The country is the one our network provider reads from your IP address; where it gives none, the view counts as unknown. These are views and clicks, not a count of distinct people.
To choose those categories we read the referring address, the tag on the link you followed and the browser description of the request, and keep none of them. We keep no IP address, no visitor identifier and no record of a single visit in the stats, only the totals per day. The technical logs described above are separate.
The artist's owners see those totals as they grow, today's included, and so do the people the artist lets work on it through an app it connected, such as its agency's. Because they change as visits happen, someone who sees them and knows you are on the artist's pages at that moment can tell your country, your kind of device, the kind of site you came from, which buttons you clicked, what you took from the EPK and which contact you reached for. That is why we treat the counts as personal data, not as anonymous information. Stats are not public and are not supplied through the API. We keep them while the artist is on TAP, so the artist can compare its history, and purging the artist removes them.
We count on the basis of our legitimate interest, and the artist's, in knowing how often the artist's pages are read, their buttons clicked, their material taken and their contacts reached, and where their visitors come from. You can object at any time with the analytics switch: with analytics off, nothing about your visit is counted for the artist's stats, apart from a request for access, which is counted from the request itself, and you keep reading as before. The switch is on the cookie policy and on the privacy summary of every artist's pages. It applies to this browser on the site where you use it, for one year: TAP and an artist's own domain each keep their own. The artist's own people are not counted on TAP while signed in, and opening their website from TAP's console turns analytics off in that browser on their domain, as the switch would. Visits counted before you turned analytics off stay in the daily totals: nothing in the stats tells your visit apart from anyone else's. See Your rights below.
When you ask an artist for access
An artist's riders sit on the EPK for everyone the page opens for, like the rest of it. An artist can close their EPK and let visitors ask for a link. Asking sends your name, your email address and whatever you write about the booking to the artist, and to nobody else. The artist decides; approving mails you a link, and a refusal sends nothing. We keep the request, and once a link is issued we record when it was last used and how often, so the artist can see which of its keys are live. The artist's stats count how many requests arrived on a day, as a number and nothing more, read from the requests we keep rather than from your visit, so the analytics switch does not change it. We keep a request, granted or refused, while the artist is on TAP, and purging the artist removes it. Passing your request to the artist is our and the artist's legitimate interest in answering it (Article 6(1)(f) GDPR); you can object under Your rights below. An artist can also make the EPK invitation only. The page then says so, and the form asks for an email address alone, so someone who was given a link and lost the mail can get it back: it only sends a fresh link to an address the artist already gave access to. Nothing you type reaches the artist, and an address that holds no link is not kept; the artist's activity log does show that a link was sent again.
A link you receive is not personal to you in any technical sense. Anyone you forward it to can open the same pages until the artist revokes it. If you lose the mail, entering the same address again sends a fresh link to that address and stops the old one working; we cannot send you the old link back, because we only keep a fingerprint of it.
When you write to an artist
Under Contacts on an artist's website and EPK there is a form for reaching the people behind the artist. You pick what your message is about, and we hand it to the contacts the artist listed for that role: bookings to their agents, advancing to their advancing contacts, press to their publicist, anything else to their primary contact or their manager. Where an artist's agents work by territory, you pick the territory and the message goes to the agents who cover it. The form offers only the subjects the artist has someone for, and an artist with no reachable contact shows no form at all.
What reaches them is your name, your email address and what you wrote. We pass it on and keep no copy of what you wrote, and no row naming you. What stays on our side is one line in the artist's activity log saying that a message about that subject arrived and on which page, which lives as long as the artist's account, one added to that day's count of messages in the artist's stats, and our own record of the address the mail went to with the subject line it carried, which is about the recipient rather than about you. Your address travels in the reply field of the mail, so answering reaches you and not us. Resend, our mail provider, carries the mail; Who receives register data says what it does on our instruction.
Relaying what you wrote to the person you meant it for is our and the artist's legitimate interest in being reachable (Article 6(1)(f) GDPR), and it is the whole of what the form is for. You can object to it, under Your rights below. To keep the form from being used for bulk sending we allow five messages an hour from one address and five from one connection. Enforcing that means counting recent sends against your address and your IP address; the count is kept against a fingerprint of the two rather than the values themselves, covers the hour it counts and is not kept after it.
Once your message has arrived, the recipient decides what happens with it and is responsible for it from there; we are responsible for the relay alone. We cannot make anyone answer. If you want a message you sent removed, ask the person you wrote to, because we do not have it.
When you ask about a release
Leaving an address on a release page, or connecting a streaming account to it, makes you a fan rather than a visitor, and a different page covers it: Privacy for fans. It says what we hold, what happens on the day, and how to end it.
When you write to us
Contact and Write to us open a support window from Help Scout, the company that runs our helpdesk. Its script loads only when you press one of those, never with the page. Once it loads, Help Scout sees your IP address and can set its own cookies, under its own privacy policy. What you type goes to us, and we answer from there. Prefer mail? Every one of those controls is also a mail link, so a browser without scripts sends a mail instead.
What we do not do
- No advertising beyond a measurement pixel for the adverts we run through OpenAI, and only once you allow it.
- No profiling, and no automated decisions about you.
- No selling or renting anything about you.
- The cookie policy lists our service cookies, the analytics, advertising and player choices, and the cookies that remember what brought you here. It also describes cookies from the support window, embedded players and an allowed advertising pixel.
Players embedded from other services
A website, a links page, an EPK or a release page can embed a player from Spotify, SoundCloud, Mixcloud, Apple Music or YouTube, because that is what the artist chose to put there.
Those players come from those companies, not from us. When one loads, that company can see your IP address and set its own cookies, under its own privacy policy, which we do not control. A video only loads once you press play. The other players wait for a press too, unless you said yes to loading them right away; the cookie policy has the switch.
If you would rather not load them, block third-party content in your browser. The rest of the page works without them.
Links to other places
An artist's pages are mostly links. When you follow one you leave us, and whatever is on the other side is governed by that site's terms and privacy policy, not ours. We do not check where the links go, and a link here is not a recommendation.
Pressing a product on an artist's shop takes you to that artist's store in a new tab, to buy or see more. From there you are on the store's own site, under its own policy, not ours.
Your rights
Even without an account you can ask what we hold about you, ask us to correct or delete it, and object to what we do with it. In practice we hold very little that could identify you. Write to help@tap.fm.
If your own details appear on an artist's pages, the notice you want is Privacy for contacts.
You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. We would rather you told us first.
Something wrong on a page?
Use the report link on the page. Anyone can report anything, and you do not need an account.
We keep the report: the artist it names, the address you gave, what you wrote, and what we decided. Your email address is optional, and it is the only part that says who you are. Leave one and we tell you what we decided; we then keep it for six months after the decision, so we can answer you if you come back on it, and forget it after that. Leave it out and we still read the report, but we have no way to reach you.
We never tell an artist who reported them.