Legal

Privacy policy

Last updated : 02/10/2026

1. Data controller

LabelRating is published by Rylaris Music Group, reachable at toni@rylarismusic.com. See the legal notice.

2. What we do not collect

We want to be precise, because "no personal data" is a claim often made carelessly. On this site there is:

• no user account (no sign-up, no login, no visitor password);
• no email address requested, neither to post a review nor to request a label;
• no phone number, postal address, date of birth or identity document;
• no advertising cookie, no social network pixel, no tracking share button;
• no analytics tool (no Google Analytics or equivalent);
• no font loaded from a third-party server — fonts are hosted on this site, so that no third party receives your IP address simply by you viewing a page;
• no sale, rental or commercial transfer of data.

3. What is actually processed

3.1 Your artist name

The artist name you enter is always sent to moderation: together with the proof link, it is what lets us verify you genuinely worked with the label. You then decide whether it is displayed:

• Shown publicly (default): your name appears next to your review.
• Published without your name (checkbox): the site shows "Verified artist" instead. Your name is still stored and visible to moderation only. This option exists because the industry is small, and fear of retaliation would otherwise keep legitimate accounts from ever being written.

You choose that name freely. We recommend your stage name rather than your legal name, and writing nothing in your review that you would not want to remain public.

3.2 The link proving your collaboration

To post a review you must provide a link to a release you made with the label (Spotify, Bandcamp, Deezer, Discogs…). That link:

• is never published and appears nowhere on the public site;
• is consulted only by moderation, to verify the collaboration is real;
• is kept while the review is online, so the verification can be justified later if the label disputes the review.

It is deliberately excluded from every query that feeds the public pages, so it cannot leak through a page or feed.

Legal basis: legitimate interest (GDPR Article 6(1)(f)) in guaranteeing the authenticity of reviews, which protects both the artists reading them and labels against fabricated accounts.

3.3 A technical fingerprint of your IP address

To prevent fake reviews and automated submissions, we store an irreversible cryptographic fingerprint of your IP address (a SHA-256 hash combined with a secret key). In practice:

• your IP address is never stored in plain text in our database;
• the fingerprint cannot be reversed to your IP address and cannot identify you;
• it serves two purposes only: limiting submissions per device, and preventing the same device from posting several reviews of the same label;
• the anti-abuse log is purged automatically after 48 hours.

Legal basis: legitimate interest (GDPR Article 6(1)(f)) in protecting the integrity of published reviews, which is also the interest of the artists reading them.

3.4 Hosting provider logs

Like any website, our hosting provider may keep connection logs (IP address, timestamp, requested page) for security and server operation. These logs are managed by the provider under its own retention periods, and we do not use them.

4. Cookies

The site uses only strictly necessary cookies, which require no prior consent:

• lr_lang — remembers your chosen language (French or English). Duration: 1 year.
• lr_session — technical session cookie, required to protect forms against forged submissions (anti-CSRF token). Deleted when the browser closes.
• lr_cookie_ack — remembers that you have read the information banner. Duration: 1 year.

None of these cookies track your browsing outside this site.

5. Third-party service: anti-robot protection

Forms are protected by Cloudflare Turnstile, an alternative to classic captchas chosen precisely because it does not profile visitors or exploit their data for advertising. During verification, Cloudflare technically receives your IP address and browser signals in order to tell a human from a robot. See Cloudflare's privacy policy. This is the only third-party service this site calls.

6. Your rights

We hold no account, no email and no legal identity, so we cannot locate "your" data from your name. In practice everything goes through the artist name and the review concerned:

• Access: write to toni@rylarismusic.com with the review URL and the artist name used. We will tell you what is stored (name, proof link, ratings, text).
• Deletion: same procedure. The review and its proof link are erased.
• Correction: same procedure to fix an error.
• Changing your mind on anonymity: you can ask at any time for your name to be hidden, or conversely displayed.
• Objection and complaint: you may at any time contact your competent supervisory authority (in France, the CNIL — cnil.fr).

We verify such requests proportionately: since there are no accounts, the simplest proof is to write to us from a channel tied to the artist name concerned (official page, public contact address). This prevents a third party from having someone else's review removed.

7. Security

Traffic to the site is encrypted (HTTPS). Administration passwords are stored as secure hashes and never in plain text. Database queries are prepared to prevent SQL injection.

8. Changes

Any change to this policy will be published on this page, with the date at the top updated.