Privacy Policy

This Privacy Policy explains how Sounds by Driver ("we," "us," or "our") collects, uses, and safeguards your information when you visit soundsbydriver.com (the "Site"). Sounds by Driver is a music and audio project operated by D2X Enterprises LLC, a Pennsylvania limited liability company, which is the data controller for the Site.

Information We Collect

We collect information in two ways: information you provide directly and information collected automatically.

Information You Provide. When you submit our contact form, we collect your name, email address, and the contents of your message. Providing this information is voluntary and is used solely to respond to your message.

Information Collected Automatically. If you consent to analytics cookies, certain information is collected automatically, including your IP address, browser type and version, operating system, device type, referring URLs, pages viewed, and time spent on pages. This information is collected through Google Analytics, as described below. Our hosting provider, Cloudflare, also processes limited technical data for security and performance as a strictly necessary function.

How We Use Information

We use the information we collect to:

• Respond to messages you send through the contact form
• Measure site traffic and understand how visitors use the Site
• Improve the Site's content, layout, and performance
• Protect the Site from spam and abuse (via Cloudflare Turnstile)

We do not sell, trade, or rent your personal information to any third party. We do not use your information for automated decision-making or profiling, and we do not serve advertising on the Site.

Cookies and Tracking Technologies

Our Site uses cookies and similar technologies. Cookies are small data files stored on your device by your browser.

Google Analytics (GA4). With your consent, we use Google Analytics 4 (measurement ID G-3B1488EES9) to understand how visitors interact with the Site. Google Analytics sets cookies (including _ga and _ga_*) to distinguish unique users and collect aggregated data such as pages visited, time on site, and traffic sources. Analytics is loaded only after you opt in through our cookie banner; until then, Google Consent Mode keeps analytics storage denied. Google's use of this data is governed by Google's Privacy Policy. You can also opt out using the Google Analytics Opt-out Browser Add-on.

Cloudflare. The Site is served through Cloudflare's content delivery network. Cloudflare may set strictly necessary cookies (such as __cf_bm) for security and bot detection. More information is in Cloudflare's Privacy Policy.

Cloudflare Turnstile. Our contact form uses Cloudflare Turnstile, a CAPTCHA alternative, to verify that submissions come from real users rather than bots. Turnstile may collect interaction and device data to make this determination.

Embedded YouTube Player. Tracks play through an embedded YouTube player in privacy-enhanced mode (youtube-nocookie.com). The player loads only when you choose to play a track; until then, no YouTube cookies are set. Once you start playback, YouTube (Google) may set cookies and collect playback and device data under Google's Privacy Policy.

When you first visit the Site, a cookie consent banner lets you accept or reject non-essential (analytics) cookies. You can change your choice at any time using the "Cookie Preferences" link in the footer. Essential cookies (Cloudflare security and Turnstile verification) are always active, as they are necessary for the Site to function.

Third-Party Services and Outbound Links

We use the following third-party services to operate the Site:

• Google Analytics — site traffic measurement (consent-gated)
• Cloudflare — content delivery, DNS, security, and Turnstile bot verification
• Resend — transactional email delivery for contact-form submissions
• YouTube (Google) — embedded player for track playback

When you submit the contact form, your message is delivered to us by email via Resend, which processes the data solely to deliver the message under Resend's Privacy Policy. The Site also links out to our profiles and music on third-party platforms (including SoundCloud, YouTube, TikTok, X, Spotify, and Amazon Music). Those platforms operate independently under their own privacy policies, which apply once you click through to them. We do not sell or share your personal information with any third party for their own marketing purposes.

Data Security

We implement reasonable technical and organizational measures to protect your information, including HTTPS encryption across the entire Site and Cloudflare's security infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

Messages submitted through the contact form are retained in our email system for as long as necessary to respond to your inquiry. Automatically collected analytics data is retained according to the default retention periods set by Google Analytics.

Your Rights

You may request access to, correction of, or deletion of your personal information at any time by emailing [email protected]. We will respond within a reasonable timeframe. The two sections below describe additional rights specific to California residents and to residents of the EU, UK, and Switzerland.

California Residents — Your CCPA / CPRA Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you specific rights regarding your personal information. This section supplements the rest of this Privacy Policy.

Categories of personal information we collect. In the preceding twelve months we have collected: Identifiers (name, email address, IP address, device identifiers — from the contact form and, with consent, analytics); Internet or other electronic network activity (pages viewed, time on site, referrer, browser and device characteristics); and approximate geolocation derived from IP address (not precise geolocation). We draw no inferences for profiling purposes.

Sources and purposes. We collect this information directly from you (contact form), automatically from your device (consent-gated analytics), and from our service providers (Cloudflare, Google Analytics). We use it to respond to inquiries, operate and improve the Site, measure traffic, and prevent abuse.

Sale or sharing of personal information. We do not sell personal information for monetary consideration. Under the CPRA's broad definitions of "sell" and "share," the transmission of analytics identifiers to Google could be considered "sharing." You can opt out at any time using the "Do Not Sell or Share My Personal Information" link in our footer, the cookie preferences modal, or by sending a Global Privacy Control (GPC) signal from your browser, which we honor.

Your rights. California residents have the right to know, delete, and correct personal information we hold; to opt out of any sale or sharing for cross-context behavioral advertising; and not to be discriminated against for exercising these rights. To exercise them, email [email protected] with the subject line "California Privacy Rights Request," or use the footer opt-out link. We will verify your request and respond within forty-five (45) days, with a one-time extension where reasonably necessary.

EU and UK Residents — Your GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the GDPR, UK GDPR, or Swiss FADP (as applicable) gives you specific rights regarding your personal data. The data controller is D2X Enterprises LLC, contactable at [email protected].

Lawful bases. We process personal data based on your consent (analytics cookies, which you may withdraw at any time via the cookie preferences modal); our legitimate interests (site security, abuse prevention); and pre-contractual / contractual steps (responding to messages you send us).

Your rights. You have the right to access, rectify, erase, restrict, and port your personal data; to object to processing based on legitimate interests; and to withdraw consent at any time. To exercise these rights, email [email protected]. You also have the right to lodge a complaint with your national supervisory authority. UK residents may contact the Information Commissioner's Office at ico.org.uk.

International data transfers. D2X Enterprises is based in the United States. When you interact with the Site from outside the United States, your personal data is transferred to and processed in the United States. We rely on the EU-US Data Privacy Framework and the UK Extension for transfers to certified processors (including Cloudflare and Google), and on the European Commission's Standard Contractual Clauses where applicable.

Children's Privacy

The Site is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

Contact Us

D2X Enterprises LLC is the data controller for the Site. If you have questions about this Privacy Policy or wish to exercise any privacy right described above, email [email protected] or use our contact form. D2X Enterprises LLC is a Pennsylvania limited liability company.