Privacy Policy

VGo Recordings ("we", "our") is an independent record label operating vgorecordings.com. This policy explains what information we collect, why we collect it, and how we use and protect it.

Information We Collect

• Customer accounts. When you make a purchase, we create a customer record containing your email address and the date your account was created. We also record the date of your most recent sign-in. We do not collect or store passwords — sign-in is by one-time email link only.
• Magic-link sign-in tokens. When you request a sign-in link, we generate a single-use random token, store it with a 30-minute expiry, and record the IP address that requested it. Tokens are invalidated as soon as they're used or expired.
• Sign-in sessions. When you click your magic link, we set a session cookie tied to your customer ID. The cookie is HTTP-only and expires when you sign out or your session times out.
• Orders. For each purchase we store the Stripe checkout session ID, the payment intent ID, the amount, the currency, the order status, and a snapshot of the items purchased (catalog number, title, price at time of sale).
• Payment data — processed by Stripe, not us. Card numbers, billing addresses, and cardholder names go directly to Stripe and never touch our servers. Stripe processes payments under its own privacy policy.
• Contact form. If you write to us, we receive the name, email, subject, and message you submit. These are emailed to us, not stored in our database.
• Server logs & analytics. Our servers log standard request data (IP, user agent, timestamp) for security and abuse detection. If you accept analytics cookies, anonymized usage data is collected via Google Tag Manager.

How We Use It

• To deliver the FLAC files you purchase and let you re-download them from your account.
• To authenticate you via the magic-link sign-in flow.
• To respond to your messages.
• To detect abuse, prevent fraudulent downloads, and investigate chargebacks.
• To improve the site (when analytics cookies are accepted).

What We Don't Do

• We don't sell, rent, or trade your personal information.
• We don't store passwords — there are none to leak.
• We don't store card numbers — Stripe handles all payment data.
• We don't share your data with third parties except the service providers required to run the site: Stripe (payments), Hostinger (hosting and email delivery), and Google Tag Manager (only if you accept analytics cookies).

Your Choices & Rights

• Access. Sign in at /account at any time to see your orders and downloads.
• Account deletion. Email info@vgorecordings.com from the address on your account and ask us to delete it. We'll remove your customer record and sign-in tokens within 30 days. Order records linked to completed transactions may be retained in anonymized form as required by tax and accounting law.
• Cookies. Decline non-essential cookies at any time via the consent banner or the Cookie Policy page.
• EU/UK residents. You have the right to access, correct, port, restrict, or object to processing of your personal data. Email us at the address above to exercise any of these rights.

Retention

• Magic-link tokens: deleted automatically once used or after the 30-minute expiry.
• Sign-in sessions: expire when you sign out or your browser session ends.
• Customer records: kept as long as your account is active, or until you request deletion.
• Order records: retained as required by applicable tax and accounting law (typically 7 years).
• Server logs: rotated regularly per host policy.
• Analytics data: retained per the provider's policies.

Security

Our site is served exclusively over HTTPS. Magic-link tokens are random, single-use, and short-lived. Sessions are HTTP-only cookies. We follow standard web security practices (CSRF protection, input sanitization, denial of direct access to sensitive files). No system is perfectly secure — if you suspect unauthorized access to your account, email us immediately.

Contact

Questions about this policy: info@vgorecordings.com.