Privacy Policy

Burn CD Online has no accounts and stores nothing you make unless you ask it to. It does set two cookies, for visitor statistics, and this page says plainly which and why. It also names every third party a request can reach.

Last updated: 22 September 2026

What we do not collect

• No account. There is nothing to sign up for and no way to log in, so there is no name, email address or password to hold.
• No advertising. The page carries no ad slots, and nothing here is sold, shared or used to build a profile of you.
• Nothing you make. The disc you are building is never uploaded unless you press the button that publishes it.

Cookies, and the one thing we do measure

This site runs Google Analytics 4 to count visits, and that is the whole of its tracking. It sets two first-party cookies on burncdonline.com:

They hold no name, no email address and nothing you typed or built. What Google receives is the sort of thing any web log holds — which page, when, roughly where from, which browser — and never your search terms, your tracklist, your disc title or your note. Google Analytics is Google’s product and Google’s own privacy policy governs what it does with it.

If you would rather not be counted: any browser can block or delete these two cookies, and most content blockers already stop the script from loading at all. Blocking it costs you nothing — every part of this site works without it. Worth being straight about one thing: Google Analytics does not honour the browser’s Do Not Track setting, so turning that on does not stop it. A blocker does.

What stays in your browser and disappears

Your compilation, the order you put it in, the title you write on the disc in marker, the note on the sticky pad and your sound preference all live in the page’s memory for as long as the tab is open. Unless you press “Create share link” on the last step, none of it is written to a server, to local storage or to a cookie — the two cookies above are for counting visits and carry none of it. Close or reload the tab and it is gone. The only parts of your state that ever leave the page are the wizard step and the language, both of which are in the URL so that a reload lands you back on the right screen.

What leaves your browser, and where it goes

Five kinds of request, and nothing else:

1. Track search. When you type in the search box, your browser queries the public Apple iTunes Search API (itunes.apple.com) directly, so the term goes to Apple and Apple’s own privacy policy governs it. If that request is blocked — by an extension, or a filtered network — it is retried through this site’s own /api/search endpoint, which forwards it to the same Apple API. Either way the search term is the only thing sent, it is not attached to any identifier, and this site keeps no log of it.
2. Cover art and audio previews. Images load from Apple (mzstatic.com) and the 30-second previews stream from Apple (itunes.apple.com) directly to your browser. Those requests reach Apple, and Apple’s own privacy policy governs them. This includes opening a share link: a published disc stores no audio and no preview addresses — Apple retires those over months, which would leave an old link with a dead player — so the page asks Apple for that disc’s track numbers from your own browser before anything can be played. Apple sees the track numbers and your IP address, as it would for any other page that embeds a preview. It is not told which disc they came from, and this site logs nothing about it.
3. Two display typefaces load from Google Fonts.
4. Visitor statistics. The Google Analytics script loads from googletagmanager.com and reports a page view. See the cookie section above.
5. Publishing a disc, and only if you ask for it. See the next section.

When you publish a disc

Pressing Create share link on the last step is the one action on this site that stores anything. It uploads three things: the tracklist (song title, artist and running time), the title you wrote on the disc in marker, and the note on the sticky pad. There is no account and no email address, and your IP address is not stored.

Two short codes are stored alongside it, and they deserve a plain explanation. Because anyone can publish without signing up, the only way to stop the same source flooding the site with spam is to be able to recognise it. So a published disc carries two 16-character hashes derived from your connection — your network operator, country, and the technical shape of your browser’s TLS handshake, one of them also including your IP address. They are one-way: hashed with a secret key held on the server, so they cannot be turned back into an address, and they are useless to anyone who does not have that key. They are used for exactly one thing — if a disc turns out to be abuse, finding the rest of what that source published and refusing more. They are never shared, never used to track you between visits, and nothing is stored at all if you do not press the button.

Pressing the button also runs a quick human check, Cloudflare Turnstile, and it is here for the same reason as those hashes: with no accounts, the only other defence against a flood is counting requests, and counting is exactly what a script spread across thousands of addresses defeats. It runs only when you press that button — not on any other page, and not while you are building a disc — and it stays invisible unless it needs you to confirm something. Cloudflare receives your IP address and technical signals about your browser, in order to answer one question: person or script. Cloudflare’s own privacy policy governs that, and Cloudflare states it is not used for advertising or to track you across sites. If your browser blocks challenges.cloudflare.com, the link cannot be made, and the page tells you so rather than failing quietly.

You get back a short link like burncdonline.com/d/hm4tqbr. That link is unlisted, not private: there is no password on it, so anyone you send it to — and anyone they forward it to — can open the disc and read your note. It carries a noindex instruction, so search engines are asked not to list it, but treat a published note as something you would be comfortable a stranger reading. Do not put anything sensitive in it.

Published discs are kept indefinitely so the links keep working. If you want one deleted, send its link to the contact address below and it will be removed — there is no account, so that is the only route.

Ordinary web server logs apply, as they do to any site: the hosting provider records the request. See the processors below.

Third parties

Children

This site is not directed at children under 13 and collects no personal information from anyone, of any age.

Your rights

Rights of access, correction, deletion and portability under the GDPR, the UK GDPR and the CCPA all apply to personal data a site holds about you. This site holds none, so there is nothing to disclose, correct, delete or export. If you believe that is wrong, write to hello@burncdonline.com and we will look into it.

Changes to this policy

If this site ever adds analytics, advertising or any form of storage, this page will be updated before that change ships, and the date at the top will change with it. There is no mailing list to notify, so the date is the record.

Contact

Questions about this policy: hello@burncdonline.com. More detail on the site itself is on the about page, and other ways to reach us are on the contact page.