Last updated: 24 October 2026
Gatti & Caiano, Lda, NIPC 516811681, Rua Teófilo Carvalho dos Santos 176, 4460-835 Guifões, Portugal, is responsible for the personal data used on sync-forward.com. Contact: [email protected].
When you buy music, we keep your email address, what you bought, the price, the payment reference and the status of refunds or disputes. We use this to deliver your purchase and give you access to your library. We never see your full card details.
When you sign in, we keep your account and your sessions so that we can identify you. One-time codes are kept only in a hashed form. To stop abuse, we keep hashes of email and IP addresses for a short time. Our servers keep normal request logs for security.
When you use the contact or booking form, we keep what you send so that we can answer you.
We use purchase and account data to perform our contract with you. We keep financial records because the law requires it. We use security logs and abuse limits because of our legitimate interest in keeping the service safe. Buying music does not sign you up for marketing.
Stripe and Sold through Link, LLC process payments, receipts, refunds and disputes, and are responsible for their own use of your data. Resend sends our emails. Cloudflare R2 stores the music files. Railway hosts our servers and databases. Vercel hosts the website. Google Analytics measures visits to public pages. Fourthwall runs the merch store under its own privacy policy. YouTube and SoundCloud players receive data from you when you use them.
Some of these providers process data outside the EEA. In that case they use an adequacy decision or EU standard contractual clauses.
Sign-in codes expire after five minutes. A session ends about seven days after you last use it. Ended sessions are deleted after about one more day. Abuse-limit records are deleted after about one day. Purchase records stay while your library exists and for as long as tax law requires. Form messages are kept only for as long as we need them to answer you.
When you sign in to your library, we set one necessary session cookie. Your browser also stores your theme, your merch cart and your player queue on your device. Google Analytics sets its own cookies on public pages. Link and Fourthwall set their own cookies on their checkout pages.
You can ask us to access, correct, delete, restrict or export your data, and you can object to processing. Write to [email protected]. We can keep records that the law tells us to keep. If you delete your email address, you lose access to your library. You can complain to CNPD, the Portuguese data protection authority, or to the authority in your country.