Privacy Policy. Plain words.
Effective 22 September 2026. Point Woebegone is the parent company of Moodwave and WoeShield. Both products are free forever: we collect no payment details because there is nothing to pay for.
The short version: we process what we must to run the tools, keep nothing we do not need, sell nothing, track nothing for ads, and destroy session data when you leave. The rest of this page is the long version, required by law.
1. Who we are
Point Woebegone ("we", "us") operates pointwoebegone.com, Moodwave (moodwave.pointwoebegone.com), and WoeShield. The data controller for this site and both products can be reached at pointwoebegone@gmail.com. We are a parent company: product subdomains may carry their own notices, and where they do, those notices apply together with this policy.
2. What we collect and why
WoeShield. Text you paste for a scan (messages, links, addresses) is processed in session to return a verdict, with reasons. Scans are not tied to an account because WoeShield has no accounts. We keep abuse-prevention counters only.
Moodwave. To build playlists you connect Spotify. We read your profile, saved tracks, and top artists through Spotify OAuth, within the smallest scopes that work. Your library is processed to classify tracks into moods and is never sold, never used for ads, and never kept longer than needed to serve you. Logging out destroys the session.
Free AI assist. Where a tag has low confidence, Moodwave may send track titles (never your Spotify password or payment data) to AI subprocessors listed below, inside a small daily limit. This is the only part of either product that touches a third-party AI model.
Rate limiting. We count requests per IP address to keep free products sustainable and to stop abuse. Counters reset daily. We show remaining tries rather than failing silently.
Messages. If you email us, we keep the message long enough to answer it.
3. What we never collect
- No payment details. Products are free, so there is no card, billing, or purchase history.
- No advertising trackers, no cross-site profiling, no sale of personal data.
- No WoeShield accounts, so no usernames or passwords exist to leak.
4. Subprocessors
We use a small set of providers to deliver the service: Spotify (music library access, governed by Spotify's own terms and privacy policy), and AI providers Groq, OpenRouter, and Hugging Face (low-confidence tag assistance only). Each processes the minimum data needed for its job.
5. Lawful bases
Under Nigeria's Data Protection Act 2023 (NDPA) and the EU General Data Protection Regulation (GDPR), we process data on these bases: your consent (connecting Spotify, pasting a scan, our GDPR Art. 6(1)(a) / NDPA s.25 basis), and our legitimate interests in keeping free products running and abuse-free (GDPR Art. 6(1)(f)), balanced against your rights and limited by data minimisation.
6. Retention
Session data dies with the session. Spotify tokens are destroyed on logout. IP rate-limit counters reset daily. Support emails are kept only as long as needed to resolve the thread, then deleted on request or within 12 months. We retain nothing "just in case".
7. Your rights
Under the NDPA 2023, the GDPR, and the California Consumer Privacy Act (CCPA) you may request access, correction, deletion, portability, restriction, or objection, and you may withdraw consent at any time. Because we keep so little, many requests resolve to "we hold nothing on you", and we will say so plainly. To exercise any right, write to pointwoebegone@gmail.com with the subject "Privacy request". We answer within 30 days, and you may complain to your supervisory authority (in Nigeria, the NDPC) if you remain unhappy.
8. Security and children
We protect data in transit with TLS, least-privilege access, and ephemeral storage. No system is perfect, and a free product cannot promise otherwise, so we limit what exists to lose. Our products are not directed at children under 13, and Moodwave requires a Spotify account, which carries its own age requirements.
9. Changes
If this policy changes materially, we will post the new version here with a new effective date before the change takes effect. Continued use after that date means you accept the updated policy.
10. Contact
Controller: Point Woebegone, via pointwoebegone@gmail.com. Subject lines starting with "Privacy" are triaged first.