Privacy Policy
Doing The Damage mobile app
Last updated: 26 October 2026.
This section explains how Doing The Damage handles personal information in its iPhone and Android apps. It supplements our website privacy policy.
Information we use
We process your email address or username and password to authenticate your existing membership. The app receives your account identifier, display name, email address, membership status and joining year. It stores a sign-in token in your device’s secure storage rather than saving your password.
We process your favourites to synchronise them with the website, and your search terms, genre selections and playback requests to deliver the tracks you choose. We also process session creation, expiry and last-used timestamps, and use your IP address in login security checks. If you contact us, we process the information you provide to answer your request.
We store track identifiers and the time a track is first previewed for at least five seconds or a download is first issued, linked to your DTD account. This lets the website and app show which tracks you have previewed or downloaded before. A download-issued record does not confirm that the file was saved successfully. This history is kept with your account; signing out or uninstalling the app does not erase it. You can request access to or deletion of this information using the contact details below.
Why we use this information
We use this information to provide membership services, verify access, search the catalogue, play previews, synchronise favourites, provide support and protect the service from misuse.
The app does not display advertising or use the Android Advertising ID. Its features do not require access to your contacts, precise location, camera or microphone.
Service providers
We use Mighty Box and Amazon Web Services (AWS) for website and audio infrastructure. Requests necessary to deliver these services are processed through that infrastructure. Apple and Google separately process information associated with app distribution and testing under their own privacy policies.
MightyBox hosts our website in its US East region. Website backups are also stored in a Dropbox account controlled by Doing The Damage. Your information may therefore be processed outside the country where you live, including in the United States.
Storage and retention
We retain former members’ website accounts so they can rejoin, unless they request permanent deletion. Favourites saved to your website account are separate from the app’s local cache. Signing out or uninstalling the app does not delete your website account or its favourites.
Mobile login requires HTTPS. App sign-in tokens expire after 30 days; the server is configured to remove expired token records through scheduled maintenance. Signing out removes the locally stored token and requests its revocation on the server.
MightyBox access/security logs can contain visitor IP addresses and are kept for up to 30 days or until the log reaches 10 MB, whichever is shorter. Error logs rotate when they reach 10 MB and do not have a fixed retention period in days; their contents depend on the website configuration.
Deleting a live website account does not automatically erase copies already present in server logs, disaster-recovery snapshots or backups. MightyBox takes daily system snapshots, and separate website backups are stored in Dropbox. We do not currently specify a fixed retention period for those backup copies. Please contact us about residual backup or log information when requesting deletion; we will explain the applicable handling and any limitations.
Privacy and deletion requests
To request access to, correction of, or permanent deletion of your account information, email help@doingthedamage.com. This address is monitored. We may need to verify your identity before handling a request. We will explain any applicable retention requirements when responding.
Intended users
The app is intended for users aged 16 and over.
Contact
For privacy questions, contact Doing The Damage at help@doingthedamage.com.
Website cookies and privacy
We use cookies on our website. By using our website you agree to this Policy and you consent to our use of cookies in accordance with the terms of this Policy.
Web cookies are small files that are placed on your computer or mobile device by a website when you visit it. They contain details of your browsing history on that website and distinguish you from other users. Cookies send data back to the originating website on each subsequent visit or allow another website to recognise the cookie. Cookies are useful because they allow a website to recognise a user’s device and, for instance, remember your preferences and generally improve your online user experience. Like most websites, our website uses cookies. Although this Notice refers to the general term “cookie”, which is the main method used by our website to store information, the browser’s local storage space is also used for the same purpose and we may use other tracking technologies through this website such as web beacons. As a result, the information included in this Notice is likewise applicable to all such tracking technologies that we use. You can find out more about cookies at www.allaboutcookies.org.
You may choose to restrict the collection or use of your personal information in the following ways: whenever you are asked to fill in a form on the website, you are agreeing to our terms and conditions and that we may use your details for direct marketing purposes. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to us or filling out the form on the contact page. We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting. If you believe that any information we are holding on you is incorrect or incomplete, please write to us or email us as soon as possible, using our contact page. We will promptly correct any information found to be incorrect.