Privacy
Last updated 23 August 2026.
Who is responsible
Another Side Ventures FZ-LLC, Al Shohada Road 158, Ras Al Khaimah, United Arab Emirates, is the controller for this site. Its representative in the EU under Art. 27 GDPR isheyData GmbH (Martin Bastius), Schützenstraße 5, 10117 Berlin, Germany,datenschutz@heydata.eu — the point of contact for data subjects and supervisory authorities. Full provider details are in the Impressum.
The short version. Rewindy has no accounts, no database and no analytics. Your deck is stored in your own browser and never sent anywhere. The site is a set of static files. The only data that leaves your device goes directly to the music and metadata services listed below, when you ask for a song or a year.
What is stored, and where
Your cards, your settings and any playlist you import live in your browser's own storage (IndexedDB and localStorage) on the device you used. They are not uploaded, not backed up and not readable by us. Clearing your browser data deletes your deck, and there is no copy anywhere to restore it from — the export in "My deck" exists for exactly that reason.
PDFs are generated on your device. The file is never uploaded. A picture you choose for the "your own design" card style is read in the browser, cropped there, and written straight into the PDF; it is not sent anywhere and is gone when you leave the page.
What we do not do
- No user accounts and no sign-up.
- No analytics, no tracking pixels, no advertising, no cookie banner — because there are no such cookies to consent to.
- No payments, so no card data of any kind.
- No newsletter and no mailing list; we do not ask for your email address.
- No profiling and no automated decision-making.
Services your browser talks to
Rewindy has no backend of its own, so these calls go from your device to the service directly. Each one necessarily sees your IP address and what you asked for, and each has its own privacy policy.
- Apple (iTunes Search API) — searching for a track and fetching the 30-second preview and cover art.
- Deezer — a second source for previews and for the ISRC that connects a track to MusicBrainz.
- MusicBrainz, Wikidata and, where this installation has one configured, Discogs — working out the original release year.
- Spotify — reading a playlist you paste. A public playlist needs no login. For a private playlist you own, you can grant access once; Rewindy receives a token limited to reading playlists, stored only in your browser, and never sees your password. Revoke it any time in your Spotify account settings.
- YouTube (Google APIs) — only when you import a YouTube Music playlist, and only to read that playlist.
- Azure Static Web Apps (Microsoft) — hosts the files. Like any web host, its servers process the request, including your IP address, in order to send you the page.
Cookies
Rewindy sets no cookies. It uses browser storage for your deck and settings, which is technically necessary for the site to do the one thing it does and is not used to recognise you across sites or sessions.
Your rights
Under the GDPR you have the right to access, correct, delete and export your personal data, and to object to processing. In Rewindy's case those rights are unusual in that you can exercise all of them yourself and instantly: the data is on your device. "My deck" exports everything as a file, edits any card and deletes what you do not want; clearing site data removes the lot. We hold nothing, so there is nothing for us to hand over or erase on request.
Children
The game is meant to be played across generations and children are welcome to play it. Since no personal data is collected at all, there is nothing collected from a child either.
Changes
If Rewindy ever does start collecting something — it currently does not — this page changes first and says so plainly, with the date at the top updated.
Contact
General questions: info@anotherside.ai. Data protection matters can also go directly to the EU representative named above.