Legal
Privacy Policy
Version 1.0 — Effective: August 17, 2026
This Policy explains what personal information Fury Song Management LLC and James Song (together, "Fury Song," "we," "us," or "our") collect through furysong.com (the "Site"), why we collect it, how long we keep it, and what you can ask us to do about it.
The Site is a professional website. It is not a platform, a marketplace, or a data business. We do not sell personal information, we do not run advertising, and we do not track you across other websites. What follows is a description of a small number of narrow, specific things.
Prior versions of this Policy, and the SHA-256 digest of each, are published in the legal register at furysong.com/legal-archive.
This Policy sits alongside our Terms of Use. Section 2.2 of those Terms describes the acceptance record we create; Section 3.1 and Sections 9 and 11 below give the retention period and your rights in respect of it.
1. Who we are, and how to reach us
Fury Song Management LLC is a limited liability company formed in the State of New York, United States. We are the controller of the personal information described in this Policy.
For any privacy question or request, use our contact form. For formal legal notice, use the legal notice form or write to:
Fury Song Management LLC
Attn: Legal Notices
4206 Bell Boulevard #313
Bayside, NY 11361
We do not publish a general e-mail address. The legal notice form requires no agreement to anything and asks for nothing beyond your name, a reply address, and your message.
2. What this Policy covers
This Policy covers your use of the Site — the pages published here, the forms on it, and our newsletter.
It does not cover:
- Third-party platforms. Our social media profiles, our newsletter platform, and any site we link to are operated by other companies under their own privacy policies. Following a link takes you outside this Policy.
- Speaking and services engagements. A signed engagement agreement governs how information is handled for that engagement.
3. What we collect, and why
3.1 Acceptance records
When you accept our Terms of Use — by clicking "I Agree & Accept" on the entry notice, or by checking the acceptance box on a form — we create a record of that acceptance. The record contains:
- the date and time of acceptance, in UTC;
- the IP address from which the acceptance was made;
- the browser user-agent string;
- the page or form on which acceptance occurred;
- the version number of the Terms of Use and this Policy as displayed to you at that moment; and
- the cryptographic hash (SHA-256) of the exact text of each document as displayed to you.
We create and keep this record for one purpose: to evidence the agreement between us, and to assert or defend legal claims. We do not use it for marketing, advertising, analytics, profiling, or scoring. We do not sell it, share it, or combine it with anything else.
3.2 The contact form
The contact form collects your name, e-mail address, an optional organization, your message, and the acceptance record described above. We use it to read and answer what you sent us.
3.3 The legal notice form
The legal notice form collects your name, a reply address, and your message. On submission it generates a reference number and a timestamp, which are shown to you as a receipt and kept with the notice.
This form carries no acceptance box and creates no acceptance record. Using it does not bind you to our Terms of Use, and we do not treat it as though it did.
We use what you send here to receive, consider, and respond to your notice, and in connection with the establishment, exercise, or defense of legal claims.
3.4 The newsletter
Our newsletter is operated by Substack, Inc. If you subscribe, Substack collects and holds your e-mail address and delivery data under its own privacy policy, and we can see subscriber information through our Substack account. You can unsubscribe from any issue. We do not add anyone to the newsletter who has not subscribed.
3.5 Server and network logs
Our host and content delivery network, Cloudflare, Inc., processes standard request data — IP address, user-agent, requested page, timestamp — to serve the Site and protect it from attack and abuse. This is ordinary web infrastructure logging, and we do not use it to build a picture of you.
4. What we do not do
To be explicit, because a privacy policy that only lists what a company does can leave the wrong impression:
- We do not sell or share personal information, as those terms are defined under California law or any other law.
- We do not serve advertising, and we do not work with advertising networks, ad exchanges, or data brokers.
- We do not build profiles, score people, or make automated decisions that produce legal or similarly significant effects.
- We do not track you across other websites or devices.
- We do not collect biometric or genetic data, health data, precise geolocation, government identifiers, financial account or payment details, or background-check information. We do not operate cameras or collect footage.
- We do not buy personal information from third parties or scrape it from public sources.
5. Cookies and local storage
We use no analytics, no advertising technology, and no third-party trackers. Our fonts are served from this Site rather than from a font network, so loading a page does not tell anyone else that you were here.
The Site stores one thing in your browser: a record that you have seen and accepted the entry notice, so that it is not shown to you again. It is strictly necessary for that function, holds no identifier, and is not read by anyone else.
Because we set nothing beyond that, there is no cookie banner and nothing to opt out of. If you clear your browser storage, the entry notice will appear again.
6. Our legal basis for using your information
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following bases under the GDPR and UK GDPR:
- Acceptance records — our legitimate interests in being able to show what you agreed to and when, and in asserting or defending legal claims. We have weighed this against your interests; the record is small, unenriched, used for nothing else, and deleted on the schedule in Section 9.
- Contact form — our legitimate interests in responding to correspondence addressed to us, and, where your message concerns a possible engagement, taking steps at your request before entering a contract.
- Legal notice form — our legitimate interests in receiving legal notice and in the establishment, exercise, or defense of legal claims.
- Newsletter — your consent, which you may withdraw at any time by unsubscribing.
- Server and network logs — our legitimate interests in keeping the Site available and secure.
- Strictly necessary browser storage — necessary to provide the service you requested; no consent is required for it.
Where we rely on legitimate interests, you can object under Section 11.2 and we will stop unless we have compelling grounds that override yours, or we need the information for legal claims.
7. Who else handles your information
We use a small number of service providers, each acting on our instructions under a written agreement. We do not disclose personal information to anyone else except where we are legally required to, or where it is necessary to establish, exercise, or defend a legal claim.
- Cloudflare, Inc. — hosting, content delivery, storage, and denial-of-service protection.
- Web3Creative/Web3Forms — delivery of contact and legal notice form submissions to us.
- Substack, Inc. — newsletter delivery and subscriber management.
If the business is ever sold, merged, or reorganized, information covered by this Policy may pass to the acquirer, which would remain bound by this Policy until it publishes its own and gives notice of the change.
8. Where your information goes
We are in the United States, and our service providers are or may be in the United States. If you send us information from outside the United States, it will be transferred to and stored there.
Where a transfer mechanism is required for personal information from the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the equivalent Swiss arrangements, together with any additional measures the circumstances call for.
We are not certified under the EU-U.S. Data Privacy Framework, the UK Extension to it, or the Swiss-U.S. Data Privacy Framework, and we do not claim the protections of those frameworks.
9. How long we keep it
- Acceptance records — six years from the date of acceptance. That period matches the general limitations period for contract claims in New York, which is the outer edge of the window in which the record could be needed for the only purpose we hold it.
- Contact form submissions — twenty-four months from our last correspondence with you about the matter.
- Legal notices and their receipts — six years from receipt, or until the matter and any related limitations period has ended, whichever is later.
- Newsletter subscription — until you unsubscribe. We then keep a minimal suppression entry so we do not re-add you.
- Server and network logs — the retention period set by Cloudflare for the service tier we use.
If a dispute is pending or reasonably anticipated, we keep the records relevant to it until it is finally resolved, and then delete them on the schedule above.
10. Security
The Site is served over HTTPS. Form submissions are transmitted over encrypted connections. Access to submissions and acceptance records is limited to those who need it to run the Site and respond to correspondence.
No method of transmission or storage is perfectly secure, and we do not promise that ours is. What we can tell you is what we hold, which is set out above and is deliberately small.
11. Your rights
11.1 Rights we honor for everyone
Whatever law applies to you, you can ask us to confirm what we hold about you, give you a copy, correct it if it is wrong, or delete it. You can object to our use of it. You can unsubscribe from the newsletter at any time. We do not treat anyone worse for asking.
The one limit worth stating plainly: where information is needed to establish, exercise, or defend a legal claim — which is the entire reason acceptance records and legal notices exist — we may keep it until that purpose ends, and tell you that is why.
11.2 If you are in the EEA, the United Kingdom, or Switzerland
You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right not to be subject to automated decision-making — though we do not carry out any. Where we rely on consent, you may withdraw it without affecting what we did before you did so.
You may lodge a complaint with your national supervisory authority, or with the Information Commissioner's Office if you are in the UK. We would rather you came to us first, but you do not have to.
11.3 If you are in California
You may ask us to disclose the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to; to correct or delete it; and to limit the use of sensitive personal information.
We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes that require a right to limit. There is accordingly no "Do Not Sell or Share My Personal Information" link on this Site, because there is nothing for it to do.
You may use an authorized agent. We will ask for reasonable proof of the agent's authority and may ask you to verify your own identity directly.
11.4 How to make a request
Send it through the contact form, or by post to the address in Section 1. We will respond within the period the applicable law allows — thirty days under GDPR and UK GDPR, forty-five days under California law — and will tell you if we need longer and why.
We will ask for enough information to be reasonably confident you are who you say you are, and no more. We will not ask you for a government ID or a financial document to answer a request about a form submission.
If you disagree with how we handled a request, tell us and we will reconsider it. You may also complain to your supervisory authority or attorney general.
12. Children
The Site is intended for adults. You must be at least 18 to agree to our Terms of Use; if you are between 16 and 18 you may use the Site only with a parent or guardian who agrees on your behalf; and you must not use the Site at all if you are under 16.
We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, tell us through the contact form and we will delete it.
13. Changes to this Policy
When we change this Policy we will publish the new version with a new version number and effective date, record its digest in the legal register, archive the prior version there, and re-present the acceptance notice so that returning visitors are asked to accept the current documents.
Changes take effect when posted. The version identified in your acceptance record is the version you were shown.
14. Contact
FURY SONG MANAGEMENT LLC
4206 Bell Boulevard #313
Bayside, NY 11361
Privacy questions and requests: use the contact form.
Legal notices: by post to the address above, or through the legal notice form.