"Bandcamp operates a moderate-to-high risk privacy model similar to Spotify, collecting extensive personal and financial data with significant third-party sharing to major advertising networks (Meta, Google, Reddit) for behavioral tracking and retargeting. Critical risks include default public display of purchase history and email to bands, granular tracking of user behavior including mouse movements and keystrokes, and automatic data transfer to acquirers in bankruptcy without opt-out provisions. While users have options to designate data private and opt out of certain tracking, these require active engagement and the default settings expose sensitive financial and behavioral data."
Take Action
6 Privacy Improvements Available
bandcamp Privacy Concerns & Scorecard
Broad sharing with major advertising networks (Meta, Google, Reddit) for behavioral tracking and retargeting without explicit per-use consent mechanisms
Extensive cross-site behavioral tracking via pixels, SDKs, and location technologies enabling retargeting across advertising networks with granular behavioral data collection
Sensitive location data collected including country of residence, zip/postal code, and location-identifying technologies for advertising purposes
Limited ability to opt out of advertising tracking; users must actively consent via cookie banner and opt-out mechanisms are not prominently featured
Retention periods defined as vague 'as long as necessary' standard without specific timeframes for different data categories
Children's data deletion relies on parental reporting rather than proactive safeguards or parental consent mechanisms
Purchase history privacy
- 1Go to your Bandcamp fan profile page.
- 2Hover over the item in your collection that you want to hide.
- 3Click 'hide album' to move the item to your hidden items section, making it invisible to other users.
- 4Repeat for any other purchases you wish to hide.
Email marketing opt out
- 1Contact Bandcamp using the contact details provided in the 'How To Contact Us' section of their Privacy Policy.
- 2Request to be removed from marketing/promotional email communications.
Wishlist privacy
- 1Go to your Bandcamp fan profile page.
- 2Click the 'Wishlist' tab.
- 3Click the drop-down next to 'Your wishlist is:' and select 'private'.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, authentication, user identification, and profile display
Payment processing, transaction fulfillment, and billing
Compliance, localization, and targeted advertising
Service functionality, analytics, security, and targeted advertising
Service improvement, user experience optimization, analytics, and targeted advertising
Communication, service delivery, marketing, and email engagement tracking
Service functionality, music discovery, and user engagement
Targeted advertising and service personalization
Cross-Platform Tracking
Bandcamp uses Meta, Google, and Reddit tracking pixels, clear GIFs, SDKs, and location-identifying technologies to track your behavior across the web and other apps for targeted advertising and retargeting purposes. This cross-platform tracking occurs through third-party advertising partner integrations that collect data about ads viewed, clicked, and user interactions beyond the Bandcamp site.
Tracking Methods:
Cookies
First-party and third-party cookies persist user preferences and tracking identifiers across Bandcamp and partner sites; users can manage or disable via cookie settings
Tracking Pixels & Clear GIFs
Meta, Google, and Reddit use invisible pixels and GIFs to track user behavior, conversions, and ads viewed across websites and apps for retargeting
Software Development Kits (SDKs)
Third-party SDKs embedded in Bandcamp's service collect behavioral data and transmit it to advertising networks for cross-platform tracking
Location-Identifying Technologies
Geolocation tracking via IP address, browser location APIs, and device location services used for location-based advertising and compliance
Google Analytics
Tracks IP address, operating system, browser type, pages visited, and device information; transmits data to Google; users can opt out via Google's opt-out browser add-on
AI & Data Training
bandcamp does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed bandcamp
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.