Bandcamp is a music marketplace and streaming platform operated by Bandcamp Ventures LLC, per its own privacy policy, with its Terms of Use disclosing EU monthly-active-user figures on a shared basis with 'Songtradr, Inc.'s services or products,' consistent with public reporting that Songtradr acquired Bandcamp in 2023 (verified here only via Bandcamp's own primary-source pages, which name the operating entity and its corporate relationship to Songtradr but do not themselves narrate the acquisition). The privacy policy states Bandcamp 'neither rent[s] nor sell[s]' personal data and shares it only in described, limited ways (intra-group, service providers, connected bands), a no-sell design distinct from ad-tech-heavy peers. Advertising cookies and third-party partners (named as Meta, Google, and Reddit) are disclosed but framed as active-consent-gated rather than default-on. No breach disclosure, regulator action, or named-firm security audit was found in this research at draft time.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
12 ON FILE
[2020-12-15] · COLLECTION
The service's policy indicates information is provided about how your personal data is used.
As assessed by PrivacySpy on 2021-05-14 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes.
Bandcamp's privacy policy states that user-profile information, including name, email address, purchase history, and other user-entered 'User Submissions,' may be displayed to other users to facilitate interaction on the Service, and that email addresses are used to associate new submissions with user profiles.
As assessed by PrivacySpy on 2021-05-14 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Somewhat.
Bandcamp's Terms of Use, in its EU monthly-active-user regulatory disclosure, states that users who access more than one of 'Songtradr, Inc.'s services or products' in a given month are counted separately for each, establishing from Bandcamp's own page that Bandcamp operates as part of the Songtradr, Inc. corporate family.
Bandcamp's privacy policy names the operating entity as 'Bandcamp Ventures LLC,' identified in the policy's opening line as the party responsible for the Service and its data practices.
As assessed by PrivacySpy on 2021-05-14 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — Yes, but you may opt-out.
Bandcamp's privacy policy states as a core principle that it 'neither rent[s] nor sell[s]' personal data to anyone, and that it shares personal data only as specifically described in the policy (intra-group affiliates, service providers, and connected bands/users).
Bandcamp's privacy policy states it uses physical, managerial, and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access; no breach disclosure, regulator action, or independent security audit was found from a primary source in this research at draft time.
The privacy policy states that, other than advertising cookies used only where the user has actively consented, Bandcamp's cookies do not collect Personal Data and are not combined with other Personal Data to identify the user or their screen name or email address; the same policy discloses that, where consent is given, Bandcamp and named third-party advertising partners (including Meta, Google, and Reddit) may use cookies, pixels, and SDKs to track activity such as links clicked and advertising identifiers.