Privacy

Last updated: September 2026

Who is responsible for your data. Ditty City is a trading name of Scroll Works Media Limited, a company registered in England and Wales (no. 04974649), registered office C/O Caat Advisory Ltd, Studio 19a Oru Space, 7 Throwley Way, Sutton SM1 4AF. Scroll Works Media Limited is the data controller for the information described below.

What we collect

• Order details: the recipient's first name, your relationship, the occasion, and the personal details you write for the lyrics. Write only what you're comfortable putting in a song.
• Contact details: your email (receipt and song link), and the recipient's email if you ask us to deliver the gift.
• Payment: handled entirely by Stripe. We never see or store card numbers.
• Why you didn’t buy, if you tell us: after you hear your free sample we may ask what’s holding you back. It’s optional. If you answer, we keep your answer and anything you type with your order, so we can make the product better.
• Words our filter refuses: if something you type is blocked as a swear word or a link, we keep the blocked word and a few words either side of it, without your email or IP address, so we can check the filter is not blocking things it should not.

How we use it

• Your order details are sent to the AI providers that make the song. Anthropic writes the lyrics from your answers. MiniMax sings the song and draws the card artwork. ElevenLabs receives the finished audio and the words to time them against each other, so the lyrics can light up in sync — it does not generate the music.
• Stripe takes the payment. We never see or store your full card details.
• Emails are sent through our email provider solely to deliver receipts, song links, and the gift itself. No marketing without your say-so.
• We keep orders and songs so your links keep working and re-writes are possible.

Analytics, chat and referral cookies

The policy used to say we collect only your order, contact and payment details. Every page we serve also carries these, so they are named here too:

• Whether we ask you first depends on where you are. If you are in the United States, we do not show a cookie banner and analytics, session recording, live chat and advertising measurement all start working when you arrive. Everywhere else — including the United Kingdom, the EEA and Switzerland — nothing but the strictly necessary cookies runs until you have made a choice, and if we cannot tell where you are we ask. Wherever you are, you can change your mind at any time using the cookie settings link in the footer of every page, and if you have already refused, that refusal is kept and is never overridden.
• Analytics. We use PostHog, served from our own domain; Matomo, which we host ourselves on our own server so that data is never sent to a third party; and Microsoft Clarity, which is Microsoft’s own service and does send data to them. Together they count page views and help us understand how people use the site. They record the pages visited, your device and browser, and a rough location worked out from your network address.
• Session recording. From the moment a page loads, we also record a replay of the screen — what you see, where you click, and what you type into our forms. We use it to find where people get stuck, and to help when you contact us about an order. That means the recipient's name, your card message, the card design you are working on and your song's words can appear in a recording — the card is captured as a picture of the screen, so anything you have put on it is visible. Payment details never do: card entry happens inside Stripe's own form, which we cannot see or record. Private links to songs and gifts are stripped out before anything is stored. Recordings are made by two services and are deleted automatically after 30 days by both: PostHog holds its recordings in the EU, and Microsoft Clarity is Microsoft’s own service and holds its recordings outside the EU. Refusing the analytics category stops both — neither script is loaded at all until you accept.
• Turning it off. If you would rather not be measured or recorded at all, visit dittycity.com/no-analytics once on each device and we will stop. Nothing else about the site changes.
• Live chat. A Tawk.to chat widget loads on our pages so you can talk to us. If you open it, what you type there is processed by Tawk.to.
• Advertising. If you arrive from an ad and accept advertising cookies, we store the ad platform's click identifier and the campaign details from the link you followed, on our own domain, for up to 90 days. If you then buy something, we tell that platform a purchase happened, with the order value and the click identifier, so they can bill us correctly and stop showing you an ad for something you already bought. We may also send a one-way scrambled (hashed) form of your email address for the same purpose — the platform can only use it to match a record it already holds, and cannot read your address from it. We do not sell your data, and we do not send the recipient's name, your card message or your song.
• If you have not answered the cookie banner. When you arrive from an ad, the click identifier is part of the web address you followed. If you have not made a choice about advertising cookies, we read it from that address and keep it with your order so we can tell which ads work, but we store nothing on your device and we cannot recognise you on a later visit. Our basis for this is our legitimate interest in measuring our own advertising. If you press Reject we do not do this at all, and if you are in the UK, the EEA or Switzerland we never share it with the ad platform unless you accepted advertising cookies. You can object at any time by pressing Reject in the cookie settings, linked in the footer of every page.
• Referral and affiliate cookies. If you arrive through someone's share link or affiliate code, we set a cookie that lasts 30 days, purely so their referral is credited if you buy.

Sharing

Your song page is reachable by anyone who has its private link. That's how the gift works. Don't post the link publicly unless you want it public. We never sell personal data.

Deletion

Use the contact form from the address on the order and we'll delete the order, the song, and its share page.

Contact

The contact form, or write to Scroll Works Media Limited at the registered office above. If you think we have handled your data badly you can complain to the UK Information Commissioner's Office at ico.org.uk.