Privacy Policy

Last updated: [DATE] · Draft — pending legal review

This is a placeholder draft, not a lawyer-reviewed document. Replace all [bracketed] fields once the company is formed, and have a licensed attorney review this before real users sign up.

1. What we collect

  • Account info: email address, username, display name, bio.
  • Activity: song ratings, rating history, posts, comments, likes, follows, blocks.
  • Technical data our infrastructure providers (Supabase, Vercel) log automatically, like IP address and browser type, for security and abuse prevention.

We never invent or infer sensitive data (health, political views, etc.). We don't collect payment information — Mubrary has no paid features yet.

2. How we use it

  • To operate the Service: show your profile, feed, and ratings to the right people.
  • To recommend albums based on the genres you picked and who you follow.
  • To enforce blocks and handle reports for moderation.
  • To secure the account and prevent abuse.

Your rating history (every change to a song rating) is stored but never shown to you or anyone else — it exists only for potential future statistics features.

3. Who we share it with

We use third-party infrastructure to run the Service: Supabase (database, authentication, storage) and Vercel (hosting). We do not sell your data. Album search queries may be sent to the public MusicBrainz API, but this only sends the album/artist name you search for — not your identity.

4. Your rights

Depending on where you live (including under GDPR/UK-GDPR), you may have the right to access, correct, or delete your personal data.

You can permanently delete your account and all associated data — ratings, posts, comments, follows — at any time from your profile. This action cannot be undone.

To request a copy of your data or ask a privacy question, contact us at [CONTACT EMAIL].

5. Children's privacy

Mubrary is not directed at children under 13, and we do not knowingly collect data from them (COPPA). Signup requires confirming you are 13 or older.

6. Data retention

We keep your data for as long as your account is active. When you delete your account, your personal data and content are permanently removed from our production database.

7. Changes to this policy

We may update this policy from time to time and will post the new version here.

8. Contact

Privacy questions: [CONTACT EMAIL]