Privacy Policy

Who operates this service

DeadGraph is operated by Peak Summit Labs LLC as an independent project, and Peak Summit Labs LLC is responsible for your personal information (the "controller"). Questions can be directed to support@deadgraph.com.

What data we collect

We collect only what is necessary to operate the service:

• Email address - collected when you sign in via Google or email verification code. Used for authentication, and to send you occasional DeadGraph updates. In the U.S., the email-updates box at sign-in starts ticked, and you can untick it or unsubscribe from any email. Outside the U.S., the box starts unticked, and we only send updates if you tick it. Either way, you can unsubscribe anytime.
• Where you signed up - if you reach sign-in through a DeadGraph link that carries a short tag (for example, from a show page or one of our ads), we save that tag once on your account when you first sign up, to learn which pages and ads bring people in. It never changes after that, and it's deleted with your account.
• Chat queries and responses - the questions you ask the chatbot, and the responses it generates, are logged to identify usage patterns and improve the service. These logs are associated with a hashed identifier (a code that stands in for you, not your name or email). It is stored apart from your email and account details. If you share an answer, anyone with the link can see the question you asked and DeadGraph's reply. Shared pages don't show who asked.
• Plays - when you play a track, we log which recording and track you played, with a hashed identifier (a code that stands in for you, not your name or email). We use it to see what people listen to. It is stored apart from your email and account details.
• IP address (hashed) - we hash your IP address for rate limiting purposes. The raw IP address is not stored.
• Session cookies - a session cookie keeps you logged in across visits. See the Cookies section below.
• Voice input on the website - if you use the microphone button in your browser, your browser's own speech recognition turns your speech into text. In Chrome that service is run by Google; in Safari, by Apple. DeadGraph receives only the resulting text, never the audio.
• Voice input in the iPhone app - the app uses Apple's speech recognition, which runs on your device when your device supports it and otherwise on Apple's servers. Requests made through Siri are handled by Siri under your own Siri settings. DeadGraph receives only the resulting text, never the audio.
• Light show and your microphone - if you choose Room in the light show's Music setting, your browser asks your permission, then listens to the microphone so the visuals can move with the sound around you. The sound is measured on your device, moment to moment, and is never recorded, stored or sent to DeadGraph or anyone else. Leaving the light show or choosing another setting turns the microphone off.
• Approximate location - We read the country your connection comes from, as reported by our hosting provider, Cloudflare. We use it to block regions where DeadGraph isn't offered and to show the right email-signup wording for your country. We never collect your precise location. We also count plays by approximate area, as described below. We also log coarse location (city, region, and timezone) alongside the query log for usage analytics. We do not collect precise location (GPS) or store your raw IP address.
• Subscription status - if you purchase a Pro subscription, we store your subscription tier and status, keyed to your email address, so we can apply your plan's limits.

When a track starts playing on the web, we add one to a count for that day and approximate area (city, region and country, estimated from your network address). We keep only these totals, which are not linked to you or your account.

We do not collect or store payment card details, billing addresses, phone numbers, or any sensitive personal data. Payment processing is handled entirely by Polar, our payment provider (see Third-party services below).

How we use your data

• Authentication - to verify your identity and maintain your session
• Service operation - to process your chat queries and return results
• Abuse prevention - hashed IP addresses enable rate limiting to prevent misuse
• Analytics - aggregated query logs help us understand how the service is used and improve it
• Service improvement - patterns in queries help us tune the AI responses and knowledge base

We do not sell your data to third parties. We do not use your data for advertising. We do not build profiles for resale or marketing purposes.

Why we use your information

• To provide the service you asked for (your account, sign-in, answers to your questions and your saved history): this is necessary to perform our agreement with you.
• To keep DeadGraph working and fair (rate limits, preventing abuse, security) and to understand usage in aggregate: our legitimate interests in running a reliable service.
• To send occasional email updates to people outside the U.S.: your consent, which you can withdraw at any time.

In the U.S., you can opt out of email updates at signup or by unsubscribing.

Data storage and infrastructure

All data is stored on Cloudflare infrastructure:

• Cloudflare D1 - relational database storing chat query logs and user records
• Cloudflare KV - key-value storage for session data and rate limiting state

DeadGraph is run from the United States, and your information is processed and stored there. If you use DeadGraph from outside the U.S., your information is transferred to the U.S., where data protection laws may differ from those where you live. Our service providers are U.S. companies; for transfers from the EU, UK and Switzerland we rely on their safeguards, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Data retention

• Session cookies - expire after 30 days of inactivity
• Questions and chat history - Questions asked without an account are deleted after 90 days. If you're signed in, your chat history is kept until you delete it or delete your account.
• Email addresses - retained while your account is active

Third-party services

DeadGraph uses the following third-party services that may process your data:

• Google Sign-In - if you choose to authenticate with Google, Google processes your credentials per their own privacy policy. We receive only your email address and a unique identifier.
• Cloudflare - all web traffic passes through Cloudflare's network, subject to their privacy policy. This includes edge processing of request metadata.
• Anthropic (Claude) - chat queries are sent to Anthropic's API to generate AI responses. Anthropic may process query content per their privacy policy.
• Polar - if you purchase a Pro subscription, checkout and payment are handled by Polar as merchant of record, per their privacy policy. Polar shares your email address and subscription status with us; your payment details never reach our servers.
• RevenueCat - purchases in the iPhone and Android apps, per their privacy policy.
• Resend - sends your sign-in codes by email, per their privacy policy.
• Apple - Sign in with Apple and the iPhone app, per their privacy policy.

Cookies

We use a single session cookie:

• dg_auth - a secure, HttpOnly session token that identifies your authenticated session. It does not contain personal information - only a hashed token used to verify your login. This cookie is required for the service to function. Expires after 30 days.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Your rights

Depending on where you live, you can ask us to: see the personal information we hold about you; correct it; delete it (you can also delete your account yourself from the Account screen); give you a copy in a portable format; restrict or object to how we use it; and withdraw any consent you've given, such as to email updates. You can also complain to your local data protection authority. To make a request, email support@deadgraph.com from the address associated with your account. We'll reply within 30 days.

Children's privacy

DeadGraph isn't intended for children under 13, or under 16 outside the United States. We don't knowingly collect information from them; if you believe a child has given us information, email us and we'll delete it.

DeadGraph for Claude (MCP)

When you use DeadGraph through Claude or another MCP client, we receive only what that tool call sends us, not your conversation.

What we keep for each lookup:

• the Google account email you signed in with
• which tool was used and what it was asked (for example, a song title or a date)
• the size of the response, how long it took, and when it happened

What we don't keep:

• the answer we sent back
• your conversation in Claude, or anything else from your chat

Other data:

• Short-lived counters for your daily and per-minute limits. They expire within about a day.
• Your sign-in grant (your email). It expires after 30 days.

Why we keep it: to enforce plan limits, to stop abuse, and to understand overall usage. We don't sell it or use it for advertising.

Where and how long: it's stored with our cloud provider, Cloudflare, in the United States. Lookup records are deleted after 90 days.

Your choices: you can disconnect DeadGraph in Claude at any time. To have your lookup records deleted sooner, contact us at support@deadgraph.com.

The controller is Peak Summit Labs LLC, as for the rest of DeadGraph.

Changes to this policy

We may update this privacy policy as the service evolves. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact