Amply collects nothing about you. Not a reduced amount, nothing. There is no account to create, no analytics, and no server that could store anything if we wanted it to.
That is a consequence of how Amply is built rather than a policy we chose to adopt. There is no backend holding a list of artists, no database of listeners, and no record anywhere of who listened to what.
This website
Static files. No cookies, no analytics, no tracking pixels, no fingerprinting. We do not know that you visited.
Setting up an artist node
When an artist connects their Cloudflare account, the authorisation happens between them and Cloudflare. We receive a short-lived access token, use it to create their storage and Worker, and discard it.
We never receive a refresh token, and we never store a credential. Our access to an artist's Cloudflare account exists for the seconds of one setup flow and then is gone permanently. We cannot go back in later. If something needs changing, the artist authorises us again.
We keep no record that the setup happened, no artist list, no email address, no node URL. The relay that carries those requests is stateless, has no storage attached to it, and logs nothing. Its source is public; it is short enough to read in a minute.
The listener app
Everything stays on the device:
- Which artists you follow, stored locally, never transmitted to us.
- What you listen to, and for how long, measured on your device so that artists can be paid. It never leaves it.
- Your wallet key, generated on your device and held in its secure storage. We never see it, cannot recover it, and could not spend from it.
There is no sync, no cloud backup, and no account. That has a real cost: lose the device without a backup and you lose the library and the balance. We would rather be honest about that than hold your data in order to avoid it.
What other people can see
We are not the only party involved, and it would be misleading to describe only our own part.
- The artist's node serves the audio, so it can see requests for it, the same way any website can. It belongs to the artist, and it is their responsibility.
- Cloudflare operates that infrastructure, under the artist's own account and Cloudflare's own privacy policy.
- The payment on-ramp, if you fund a wallet, is a separate company whose terms and identity checks are their own.
- The blockchain. Payments to artists are recorded on a public ledger. This is worth understanding clearly: those records are permanent, public, and cannot be deleted. Anyone can see that an address paid an artist, when, and how much. Addresses are not names, but they are not anonymous either, a wallet can be linked to a person, particularly through the on-ramp that funded it.
Your rights
Data protection law gives you rights to access, correct and erase personal data held about you. We hold none, so there is nothing for us to produce or delete. If you believe otherwise, write to us and we will look into it.
Changes
If this page changes, the change is visible in the public repository's history, with a date and a diff. We cannot quietly revise it.
Contact
Open an issue on the repository.