Privacy Policy.

Who this policy applies to

“PRYCOT independent music label” refers to the independent music distribution and artist-services operation presented through prycot.com, including its website, account area, Telegram workflows and PRYCOTLINK service. “You” means a visitor, artist, account holder, release submitter or other person interacting with these services.

PRYCOT serves an international audience. The law applicable to the processing of your information depends on the circumstances, including where you are located, where the service is operated and the nature of the relevant activity. Nothing in this policy limits rights that cannot lawfully be excluded under the laws applicable to you.

Information we collect

The information we collect depends on how you use PRYCOT. It may include:

• Telegram account and authentication information: Telegram user ID, first and last name, username and, where supplied, profile photo URL. The Telegram Login flow also returns authentication fields such as an authentication timestamp and signature. The PRYCOTLINK browser flow may temporarily store the authentication payload in session storage, local storage and a first-party cookie so that the session can be restored and authenticated requests can be made.
• Account and communication information: information you provide when contacting us, discussing a release, requesting support or communicating with our team, including your email address, Telegram username or other contact details and the contents of your messages.
• Release information and materials: artist and release names, track titles, release type, genre, release date, explicit-content information, audio files, artwork, descriptions, contributor details and other metadata or materials you submit through PRYCOT’s website, Telegram bot or other service-provided channels. For Telegram submissions, the bot stores submission details and Telegram message/file references in an application session and forwards the relevant messages and media to the PRYCOT review chat; the media itself is handled by Telegram.
• PRYCOTLINK information: public-page title, artist name, UPC where supplied, cover image, streaming-platform links, social links, custom links and video URLs, together with the page slug, creation time and account identifier used to manage the page. Cover images may be stored in Cloudflare R2; page and link data are stored in Cloudflare D1.
• Payment and royalty information: wallet addresses, transaction hashes or identifiers, amounts, payment confirmations and related correspondence where provided or needed to verify a service payment or royalty payout. Royalties are paid in USDT on TRC20 or TON. Blockchain transactions may be publicly visible on the relevant network.
• Technical and usage information: request and page information, browser storage identifiers, timestamps, referring source and approximate country. Cloudflare processes network requests as part of delivering and securing the website and backend. PRYCOT’s application analytics tables record country metadata supplied with certain requests, but do not include a raw IP-address column.
• Analytics events and identifiers: the website and PRYCOTLINK use separate random browser identifiers stored in local storage to count unique visitors and associate page views with later link clicks. Analytics records may include the page path or release slug, event time, link category and label, referring-source category and approximate country. These identifiers are browser-specific and are not a verified identity.

We do not ask you to provide sensitive personal information to use the ordinary website features. Please do not submit sensitive information unless it is genuinely necessary and we have requested it.

How we use information

We use information for the following purposes:

• to authenticate you and maintain your PRYCOT account;
• to create, display, edit and secure PRYCOTLINK pages;
• to receive and review release submissions made through the website, Telegram bot or other service-provided channels, prepare the release package and deliver approved releases through an independent international backend music-distribution service and selected digital platforms;
• to communicate with you about submissions, corrections, release status, support and service requests;
• to process service payments, calculate or reconcile royalties, and arrange payouts;
• to measure traffic and link engagement, understand service usage and improve website functionality;
• to prevent fraud, abuse, unauthorized access and technical or security incidents;
• to comply with applicable legal obligations and establish, exercise or defend legal claims.

Depending on the activity and applicable law, we process information to provide a service you request, perform or take steps toward a contract, pursue legitimate operational and security interests, comply with legal obligations, or on another lawful basis available to us.

Public pages and information you choose to publish

PRYCOTLINK pages are designed to be public and shareable. Information and materials you place on a published page — such as artist and release details, images, videos, descriptions and external links — may be viewed, copied, indexed or shared by anyone with access to the page or its URL.

Do not include private information in public-page fields. You are responsible for checking the content and links before publishing. Editing or removing content from PRYCOTLINK does not necessarily remove copies, previews or cached versions held by third parties or search engines.

When information is shared

We do not sell personal information for money. We share information only as reasonably necessary to operate the services, fulfil your requests, protect the service or meet legal obligations. Recipients may include:

• Telegram: PRYCOT uses Telegram Login and Telegram bots for account authentication, release submissions, review and service communications. For bot submissions, the bot may copy your submitted text and media messages from your chat to a private PRYCOT review chat. Telegram processes and stores those messages and media under its own terms and privacy policy.
• Cloudflare: PRYCOT uses Cloudflare Workers to run backend APIs, Cloudflare D1 to store application records and analytics, and Cloudflare R2 to store PRYCOTLINK cover images. Cloudflare also processes network requests for delivery and security. Cloudflare’s own processing, service logs and retention are governed by its terms and product settings.
• Content delivery and asset services: certain interface icons and assets may be requested from third-party content hosts, including the Simple Icons CDN. Your browser may send ordinary connection information to those hosts when it loads those assets.
• Independent international backend music-distribution service: when you submit a release, we may transmit the audio, artwork, metadata, rights-related declarations and other information required to process and deliver that release through the distribution infrastructure.
• Digital music platforms and stores: release metadata, audio, artwork and other delivery information are supplied to platforms selected for distribution, as required to make the release available.
• Public blockchain networks: PRYCOT accepts cryptocurrency payments and makes royalty payouts in USDT on the TRC20 or TON networks, as applicable. Wallet addresses and transaction identifiers may be used to reconcile payments and payouts. Blockchain transactions are recorded on public networks and may be visible to anyone; PRYCOT cannot alter or erase public blockchain records. The current website does not identify a third-party card-payment processor.
• Professional advisers and authorities: where disclosure is reasonably necessary for legal, accounting, security or regulatory purposes, or where required by valid legal process.

Service providers may process information on our behalf or under their own terms, depending on the service they provide. Telegram, Cloudflare, external asset hosts, the backend distribution provider and digital music platforms operate under their own privacy and service terms. PRYCOT does not control their independent retention practices.

International data processing

PRYCOT works with artists and service providers internationally. Your information may therefore be transferred to, stored in or accessed from countries other than your country of residence, including the United States and other locations where our infrastructure or service providers operate.

Privacy and data-protection laws may differ between countries. Where applicable law requires safeguards for an international transfer, we intend to use an appropriate transfer mechanism or other legally recognized safeguard.

Cookies, local storage and similar technologies

PRYCOT currently uses the following first-party browser technologies:

• Telegram authentication cookie: the PRYCOTLINK flow may set a cookie named prycotTelegramProfile on the PRYCOT domain. The code sets a seven-day maximum age, the Secure attribute and SameSite=Lax. The same authentication payload may also be kept in session storage and local storage so the user can remain signed in and make authenticated requests.
• Optional analytics identifiers: only if you accept optional analytics, random identifiers are stored in local storage for the homepage visitor counter and PRYCOTLINK analytics. They distinguish repeat visits from the same browser and are not used as a login credential. If you reject analytics, these identifiers are not created or sent by the analytics scripts.
• Temporary handoff token: a short-lived account-to-editor handoff token may be stored in session storage while a user moves from the account area to edit a PRYCOTLINK page. The server-side handoff token expires after approximately ten minutes.

The Telegram authentication cookie and temporary handoff token support account access and page editing. Optional analytics storage is used only after you give consent through the privacy choices panel. You can reject or later withdraw consent using the “Privacy choices” control displayed on the website. Clearing or blocking browser storage may sign you out, prevent page editing or reset the browser-specific analytics identifier.

In the website code reviewed for this policy, we did not identify advertising cookies, cross-site advertising trackers, Google Analytics or Meta Pixel. This is a code review of the current site files, not a guarantee that infrastructure providers never process request or security data. Telegram Login and third-party asset hosts may receive technical information when your browser loads their content. Browser settings let you clear or block local storage and cookies, but this may affect sign-in, editing and visitor statistics.

Analytics and measurement

PRYCOT analytics record homepage and PRYCOTLINK page visits, unique browser visitors and clicks on streaming and social links. A random visitor ID is generated in the browser and stored in local storage. The backend records this identifier with the page type and page key, event timestamp and, for release-page visits, a referring-source category and approximate country. Country is derived from Cloudflare request metadata. The PRYCOT analytics tables do not contain a raw IP-address field, although Cloudflare necessarily processes IP addresses as part of network delivery and security.

Optional analytics are disabled by default and are activated only after you select “Accept analytics” in the privacy choices panel. If you reject optional analytics, PRYCOT does not create or send the browser visitor identifier or new page-view and link-click events. You can change your choice at any time using the “Privacy choices” control. Analytics are used to display statistics to page owners, count unique visitors and measure link engagement. The identifier is browser-specific: clearing local storage or using another browser or device may cause a visitor to be counted as new. Country estimates may be inaccurate when a visitor uses a VPN or proxy. Referring-source information may be missing or generalized by the browser or app. Statistics collected before you change your choice are not automatically erased when you withdraw consent; you may request deletion using the privacy contact below.

Data retention

PRYCOT applies the following retention targets to information under its control:

• Incomplete Telegram release drafts: up to 30 days after the last activity on the draft.
• Account-linking records and account profile data: while the account remains active and for up to 24 months after the last meaningful account activity or account closure.
• Release submissions, metadata, delivery records and royalty-related correspondence: while a release is being processed or remains distributed, and for up to 24 months after the relevant service relationship ends or the release is taken down. Longer retention may apply where needed for royalty reconciliation, legal claims, accounting or regulatory obligations.
• PRYCOTLINK page data and cover images: while the page remains published. Following a verified deletion request or page removal, PRYCOT aims to remove the page data and associated cover from active systems within 30 days. Copies held by third-party caches, search engines or backups may persist for a limited additional period.
• Analytics records: up to 24 months from the event date, after which they should be deleted or irreversibly aggregated.
• Temporary PRYCOTLINK handoff tokens: valid for approximately 10 minutes. Expired or used tokens are removed during subsequent handoff processing.
• Operational or security logs maintained directly by PRYCOT: up to 90 days, unless a longer period is reasonably required to investigate an incident or preserve evidence.

These are PRYCOT’s retention standards for information under its control. Some deletion steps may require operational or manual action and are not all enforced automatically by the current application code. PRYCOT will apply these limits through its data-management procedures and will not treat a period as a guarantee about independent retention by Telegram, Cloudflare, the distribution provider, digital platforms, blockchain networks or other third parties. Provider logs and backups are governed by the relevant provider’s terms, product settings and technical deletion cycles. Certain records may be retained longer where required by law or necessary to establish, exercise or defend legal claims.

Security

We use technical and organizational measures intended to protect information against unauthorized access, loss, misuse or alteration. No website, internet transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping access to your Telegram account and devices secure and for notifying us if you suspect unauthorized use of your PRYCOT account.

Your privacy choices and rights

Privacy rights vary by country and, in some places, by state or region. Depending on the law applicable to you and to PRYCOT’s processing activities, you may have rights to access, correct, delete or obtain a copy of certain personal information, or to object to or restrict particular processing. The availability and scope of these rights may be subject to legal conditions and exceptions.

Regardless of whether a particular state privacy statute applies, you may contact us to ask what personal information we hold about you or to request correction or deletion where reasonably possible. We will review and respond to requests in accordance with applicable law. Certain records may need to be retained for distribution, royalty accounting, security, dispute-resolution or legal purposes. Public blockchain records cannot be edited or deleted by PRYCOT.

To make a privacy request, contact us at info@prycot.com with the subject line “Privacy Request”. We may ask for information needed to verify your identity and locate the relevant account or records. We will respond within the period required by applicable law.

For account information obtained through Telegram, you can also manage aspects of your Telegram profile through Telegram. Deleting local browser data may sign you out or reset the browser visitor identifier, but it does not by itself delete information already held by PRYCOT or third-party services. A request to delete an account or PRYCOTLINK page should be sent to the privacy contact below and may be subject to the retention needs described above.

If a state privacy law applies to PRYCOT, we will honor the rights and obligations required by that law, including any applicable appeal or opt-out process. We do not currently sell personal information or use it for cross-context behavioral advertising.

Children’s privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us, contact us so we can review the matter and take appropriate steps. Users who submit music or manage an artist account should have the legal capacity and authority to do so.

Third-party websites and services

PRYCOT pages may link to Telegram, streaming platforms, social networks, payment tools and other external websites. We do not control those services and are not responsible for their privacy practices. Review the privacy policy of each third-party service before providing information or using its features.

Changes to this policy

We may update this Privacy Policy when our services, technology, providers or legal obligations change. The revised version will be published on this page with an updated “Last updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.

Contact

For questions about this Privacy Policy or requests concerning personal information, contact:

PRYCOT. — Privacy inquiries
info@prycot.com
prycot.com

Operator: PRYCOT independent music label
Website: prycot.com
Privacy contact: info@prycot.com

If PRYCOT begins operating through a registered legal entity, this section will be updated to include its full legal name and registered address.